last executing test programs:

9.110949514s ago: executing program 1 (id=1572):
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
semget$private(0x0, 0x207, 0x480)
keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}})
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002800000", 0x2c}, {&(0x7f0000000640)="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", 0xe00}, {&(0x7f00000000c0)="26fc4bcf8b00c19cd0eed8a91f7c36de44eed2752c4d27ee2e10986d2b", 0x1d}, {&(0x7f0000000280)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a47502b4207297de026ed4ea30bef60af76f2b26e1a2768a7226f918253314511129725d", 0x68}, {&(0x7f0000000200)}, {0x0}, {&(0x7f00000004c0)="91f0807b6afddf80750c5a560c2081f08de8a721aa5e3cfd5a6bc6cabda994bf8693656d03e1ecd9d468f2d4bb42292991d19fba6097597c9e6f16fdcb2b551f2bfeaaf98a60bc01df68984cf336e2d257b29840e3adfa847b5f420ea7b5e4d1545ae88f63dfbb3ecdfa6633997cbaaa79e2ada80941ed932cbd7a0b11325041f526151f6be00828495864ad9f61c009821728b246b5957891caf322b4a8c97874073ecf48e0cde8e05ba00619d7d90907550d123307265ef06a5ba4a640b82641a834e2684781e4b3e0a93e8d25795a7949e0864c40b8396a01a59b509e34ef484c938c3a677a072a4fba", 0xeb}, {0x0}], 0x8}, 0x0)
openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x300}]}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

8.219925418s ago: executing program 1 (id=1575):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000)
syz_usb_disconnect(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[{0x4, 0x2, 0x0, 0x1}, {0x0, 0x1, 0x4, 0x9}, {0x4, 0x3, 0xb, 0xb}, {0x3, 0x3, 0x9, 0x2}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0b45545, &(0x7f00000000c0))
close_range(r2, 0xffffffffffffffff, 0x0)

7.375495365s ago: executing program 3 (id=1577):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r6, 0x5)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x14)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x14004893}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x6)

6.168664523s ago: executing program 3 (id=1580):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x7, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000140)={0x2})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x18, r7}, 0x14)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
close_range(r9, 0xffffffffffffffff, 0x0)

6.142268597s ago: executing program 0 (id=1581):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50}, 0x50)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
openat$ubi_ctrl(0xffffff9c, 0x0, 0x80040, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x23, &(0x7f0000000980)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x19, 0x4, 0x8, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000ffa000/0x3000)=nil], 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x19}]}, 0x18}], 0x1}, 0x0)

5.477068596s ago: executing program 1 (id=1582):
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="9d1a3443dbb92ee574ec296c0fb0ce000000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf252a00000008002f000c0000000500360001000000060006000000000000007f000200", @ANYRES32=0x0, @ANYBLOB="050036000100000008000200", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x48040)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan1\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_io_uring_setup(0x117, &(0x7f0000000540)={0x0, 0x0, 0x10, 0x2, 0x6e}, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
socket$alg(0x26, 0x5, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
inotify_init1(0x0)
io_uring_enter(r4, 0x2af, 0xb7fd, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, 0x0, 0x4080)

4.582223704s ago: executing program 2 (id=1584):
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400})
r2 = io_uring_setup(0x7b3, &(0x7f0000000440)={0x0, 0xf42f, 0x0, 0xffa, 0x32f})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})
madvise(&(0x7f00003c7000/0x3000)=nil, 0x3000, 0xf)
setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0x70bd2b, 0x25dfdbfd, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x2}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x4000011)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

4.242744399s ago: executing program 2 (id=1585):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
write$cgroup_devices(r0, 0x0, 0xffdd)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00"/12, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x71]}}, &(0x7f0000000c00)=""/122, 0x1b, 0x7a, 0x1, 0x0, 0x10000, @value}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={0xffffffffffffffff, 0x8, 0x10}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x4, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x3, &(0x7f0000000e40)=[r1, r7], &(0x7f0000000e80)=[{0x4, 0x3, 0x9, 0x3}, {0x0, 0x3, 0x0, 0x6}, {0x0, 0x2, 0x9, 0x8}], 0x10, 0x1, @void, @value}, 0x94)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa0000"], 0x54}}, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="0900b88a650000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf090000000000005509"], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9)
ioctl$sock_netdev_private(r8, 0x8924, &(0x7f0000000000))

4.137401477s ago: executing program 2 (id=1586):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001bc0)=ANY=[@ANYRESHEX=r0], 0x5c}}, 0x20004040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={<r7=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib}}, 0x118)
write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r7, 0x2}}, 0x18)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003100), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_MODE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="07df250d00000008000100010000000c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008050}, 0x8880)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000004b00000008000300", @ANYRES32=r10, @ANYBLOB="00000000000000b300000000e30edeccb00d10f2252b89ca325c38533f612026b280833338a7c5aadfda9f86b28f1b016cc841504524f08e2f64a390eada84b5f4a5a7ee5f4f585c7783b5b9816f45fbe86dc4c8c4ab2f4eed64db0c032280f05f285ccd8962be83600e45efee5aca4f9ca19aba1d175728d7b59bf6f0bf3d9c13bd78d45cf2c0b236646accd1fae588ea642c7a90ad6ae77553801679e52945ecfd9ed0ca1e6d0a3d99b90f1a68776a6f0f542598cbab51306fb684d8b925ac2f4190e8c3097f14d8ea334c1b66b5d2ebc33976866b7edee83753b1e9bda49eb66f6975c825e4a558243b9e11a44871b163a4020106b04a1db64d87ba"], 0x1c}}, 0x0)

4.123471601s ago: executing program 0 (id=1587):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x7c45, &(0x7f0000000080)={0x0, 0x20, 0x13100, 0x0, 0xfffffffc}, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x8200, 0x0)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', 0x0})

4.117547182s ago: executing program 1 (id=1588):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x4000)
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8", 0xe, 0x4810, &(0x7f0000000200)={0x11, 0x9, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r6, 0xc0185500, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000100)={{0x2}, 0x100, './file1\x00'})
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100000000000000000006"], 0x14}], 0x1}, 0x0)
fsopen(&(0x7f0000000280)='cramfs\x00', 0x1)
r9 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r10=>0x0, &(0x7f0000000080)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc0)
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x10110, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d7669693d00044fbd67ad36020643e6dc662ff36600fdffffff0030303030"])

4.079197054s ago: executing program 3 (id=1589):
fanotify_init(0x4, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x101)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = userfaultfd(0x80001)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x40000}, 0x18)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r6 = dup3(r5, 0xffffffffffffffff, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r8 = socket$xdp(0x2c, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c)
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

3.189955577s ago: executing program 0 (id=1590):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c6ba6bef4a1c4e384d8c033ed7a80ffdfef0f000060000000a2bc5603ca00000f7f8900000008000000372471083ec6991778581acb6c01", 0x48}], 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x25, &(0x7f0000000140))
fcntl$lock(r4, 0x24, &(0x7f00000000c0)={0x2})
socket$tipc(0x1e, 0x5, 0x0)
r5 = socket(0x10, 0x400000000080803, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x70, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x811)
unshare(0x62040600)

2.976484319s ago: executing program 3 (id=1591):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prctl$PR_SET_MM_MAP(0x35, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@ifindex, 0x32, 0x4bb11a8cf0efaf80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850)

2.271015042s ago: executing program 0 (id=1592):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x402, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004841}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
keyctl$join(0x1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r5=>0x0})
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r5, 0x25, 0x0, @void}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r7}, 0x5)
socket$netlink(0x10, 0x3, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r8, 0x40047440, 0x20000000)

2.045943384s ago: executing program 3 (id=1593):
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00')
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0)
set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0x403c5404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10)
sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

1.697910439s ago: executing program 2 (id=1594):
socket$kcm(0x11, 0x3, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
r2 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
close(r2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
shutdown(r3, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r2)
unshare(0x64000600)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
unshare(0x22020500)
getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x7, 0x800, 0x3, 0xfffffbfb, 0x4]}, &(0x7f0000000040)=0x54)
accept4(r1, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000240)={r5})

1.296445131s ago: executing program 0 (id=1595):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]})
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0)
openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0)
keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010"], 0x24}], 0x1}, 0x0)

1.124050617s ago: executing program 3 (id=1596):
socket$kcm(0x11, 0x3, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
close(0xffffffffffffffff)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
shutdown(r3, 0x0)
r4 = dup3(r3, r2, 0x0)
recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
unshare(0x64000600)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
unshare(0x22020500)
getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x7, 0x800, 0x3, 0xfffffbfb, 0x4]}, &(0x7f0000000040)=0x54)
accept4(r1, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000240)={r6, r4})

684.016523ms ago: executing program 1 (id=1597):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
r0 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=<r1=>0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000040)="82e5a666b9970000400f32660f388093080026670f797ccb000f20c06635040000000f22c066b9800000c00f326635008000000f3066b9780b00000f323e6465660ff90e0098f00fbb4bab0f01cb", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, 0x0)
r5 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x16b601, 0x0)
write$sequencer(r5, 0x0, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
timer_getoverrun(0x0)

612.846398ms ago: executing program 2 (id=1598):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])
chdir(&(0x7f0000000280)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x40000, 0x2)
io_setup(0x1fe, &(0x7f0000000200)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
inotify_init1(0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x4000, r0, &(0x7f0000000180)='\x00', 0xf000, 0x2}])
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

64.027019ms ago: executing program 2 (id=1599):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x5, 0x4)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xf59, 0x1, 0x17)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000003c0))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])
chdir(&(0x7f0000000280)='./file0\x00')
ioperm(0x401, 0x5, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
pwritev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1, 0x6, 0x4)
syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00')
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0xc004)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000005"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10)
statfs(0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

9.78417ms ago: executing program 1 (id=1600):
ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, &(0x7f0000001180))
socket(0x28, 0x2, 0x1)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x2, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]})
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e00000010000655800189000"], 0xfdef)
socket(0x22, 0x800, 0x0)
io_setup(0x3, 0x0)
syz_usb_connect(0x5, 0x6a, 0x0, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

0s ago: executing program 0 (id=1601):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
inotify_init1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, &(0x7f0000000a40)="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"}}, &(0x7f0000000040))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCFLSH(r2, 0x80045438, 0x300000000000000)
timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
gettid()
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x14ba82, 0x18)
write$cgroup_int(r6, &(0x7f0000000000)=0xfe8e, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180)=0x2, &(0x7f00000000c0)=r4}, 0x20)

kernel console output (not intermixed with test programs):

) rhport(0) sockfd(6)
[  305.887935][T10859] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  305.890718][T10859] vhci_hcd vhci_hcd.0: Device attached
[  306.065516][   T35] vhci_hcd: vhci_device speed not set
[  306.134230][   T35] usb 43-1: new full-speed USB device number 3 using vhci_hcd
[  306.793670][T10860] vhci_hcd: connection reset by peer
[  306.797526][   T45] vhci_hcd: stop threads
[  306.799386][   T45] vhci_hcd: release socket
[  306.800755][   T45] vhci_hcd: disconnect device
[  306.802943][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'.
[  307.094192][ T5883] vhci_hcd: vhci_device speed not set
[  307.290561][T10875] bond0: (slave netdevsim0): Releasing backup interface
[  307.352421][T10875] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  307.357819][T10875] team0: Port device netdevsim0 added
[  307.461397][T10876] team0: Port device netdevsim0 removed
[  307.463738][T10876] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  307.466212][T10876] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  307.935957][T10884] syz.0.990: attempt to access beyond end of device
[  307.935957][T10884] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[  307.936785][T10885] block nbd0: shutting down sockets
[  307.939644][T10884] syz.0.990: attempt to access beyond end of device
[  307.939644][T10884] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0
[  308.095974][T10889] validate_nla: 2 callbacks suppressed
[  308.095985][T10889] netlink: 'syz.1.991': attribute type 10 has an invalid length.
[  308.099959][T10884] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  308.102946][T10884] syz.0.990: attempt to access beyond end of device
[  308.102946][T10884] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0
[  308.106667][T10884] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  308.110179][T10884] syz.0.990: attempt to access beyond end of device
[  308.110179][T10884] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0
[  308.121701][T10884] syz.0.990: attempt to access beyond end of device
[  308.121701][T10884] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0
[  308.126332][T10884] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  308.130115][T10884] syz.0.990: attempt to access beyond end of device
[  308.130115][T10884] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0
[  308.134522][T10884] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  308.138070][T10884] syz.0.990: attempt to access beyond end of device
[  308.138070][T10884] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[  308.143363][T10884] syz.0.990: attempt to access beyond end of device
[  308.143363][T10884] nbd0: rw=0, sector=2048, nr_sectors = 8 limit=0
[  308.174214][T10887] nbd0: detected capacity change from 0 to 67108884
[  308.196818][T10884] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  308.198048][T10891] netlink: 'syz.1.991': attribute type 10 has an invalid length.
[  308.201847][T10884] blk_print_req_error: 120 callbacks suppressed
[  308.201980][T10884] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  308.225356][T10884] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0
[  308.229981][T10884] I/O error, dev nbd0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  308.240404][T10884] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1
[  308.254902][T10884] I/O error, dev nbd0, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  308.264848][T10884] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  308.268361][T10884] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  308.340819][ T9752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  308.349549][T10889] bond0: (slave netdevsim0): Releasing backup interface
[  308.353667][ T9752] buffer_io_error: 80 callbacks suppressed
[  308.353676][ T9752] Buffer I/O error on dev nbd0, logical block 0, async page read
[  308.353822][T10889] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  308.355769][ T9752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  308.360050][T10889] team0: Port device netdevsim0 added
[  308.372456][T10891] team0: Port device netdevsim0 removed
[  308.378599][ T9752] Buffer I/O error on dev nbd0, logical block 0, async page read
[  308.379156][T10891] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  308.381207][ T9752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  308.383145][T10891] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  308.386966][ T9752] Buffer I/O error on dev nbd0, logical block 0, async page read
[  308.394249][ T9752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  308.397144][ T9752] Buffer I/O error on dev nbd0, logical block 0, async page read
[  308.397390][T10894] netlink: 44 bytes leftover after parsing attributes in process `syz.2.992'.
[  308.399436][ T9752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  308.402459][T10894] netlink: 59 bytes leftover after parsing attributes in process `syz.2.992'.
[  308.405103][ T9752] Buffer I/O error on dev nbd0, logical block 0, async page read
[  308.410602][ T9752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  308.413198][ T9752] Buffer I/O error on dev nbd0, logical block 0, async page read
[  308.416212][ T9752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  308.418766][ T9752] Buffer I/O error on dev nbd0, logical block 0, async page read
[  308.421005][ T9752] Buffer I/O error on dev nbd0, logical block 0, async page read
[  308.423211][ T9752] ldm_validate_partition_table(): Disk read failed.
[  308.425155][ T9752] Buffer I/O error on dev nbd0, logical block 0, async page read
[  308.427369][ T9752] Buffer I/O error on dev nbd0, logical block 0, async page read
[  308.429644][ T9752] Dev nbd0: unable to read RDB block 0
[  308.431364][ T9752]  nbd0: unable to read partition table
[  308.435286][ T9752] ldm_validate_partition_table(): Disk read failed.
[  308.437375][ T9752] Dev nbd0: unable to read RDB block 0
[  308.439112][ T9752]  nbd0: unable to read partition table
[  308.442565][ T9752] ldm_validate_partition_table(): Disk read failed.
[  308.445000][ T9752] Dev nbd0: unable to read RDB block 0
[  308.446847][ T9752]  nbd0: unable to read partition table
[  308.572551][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'.
[  309.135230][T10908] netlink: 'syz.0.995': attribute type 10 has an invalid length.
[  309.467697][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'.
[  309.488993][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'.
[  309.931286][T10923] netlink: 'syz.0.999': attribute type 10 has an invalid length.
[  309.935248][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'.
[  309.935395][T10923] bond0: (slave netdevsim0): Releasing backup interface
[  309.985987][T10925] netlink: 'syz.0.999': attribute type 10 has an invalid length.
[  310.096850][T10923] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  310.102028][T10923] team0: Port device netdevsim0 added
[  310.112270][T10925] team0: Port device netdevsim0 removed
[  310.115346][T10925] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  310.118193][T10925] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  310.288117][T10930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'.
[  310.307579][T10931] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  310.318343][T10931] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  310.329935][T10931] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  310.688414][T10937] tun0: tun_chr_ioctl cmd 1074025675
[  310.689960][T10937] tun0: persist enabled
[  310.695844][T10937] tun0: tun_chr_ioctl cmd 1074025675
[  310.698338][   T57] libceph: connect (1)[c::]:6789 error -13
[  310.700098][   T57] libceph: mon0 (1)[c::]:6789 connect error
[  310.703218][T10937] tun0: persist enabled
[  310.852196][T10942] ceph: No mds server is up or the cluster is laggy
[  311.267160][T10952] netlink: 'syz.3.1004': attribute type 10 has an invalid length.
[  311.274208][   T35] vhci_hcd: vhci_device speed not set
[  311.280821][T10952] bond0: (slave netdevsim0): Releasing backup interface
[  311.283441][T10952] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  311.286278][T10952] team0: Port device netdevsim0 added
[  311.292630][T10945] lo speed is unknown, defaulting to 1000
[  311.308712][T10952] netlink: 'syz.3.1004': attribute type 10 has an invalid length.
[  311.396606][T10952] team0: Port device netdevsim0 removed
[  311.399070][T10952] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  311.401349][T10952] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  311.947955][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'.
[  312.258642][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'.
[  312.579853][T10979] netlink: 'syz.2.1010': attribute type 10 has an invalid length.
[  312.633814][T10980] netlink: 'syz.2.1010': attribute type 10 has an invalid length.
[  312.948940][T10979] bond0: (slave netdevsim0): Releasing backup interface
[  312.953642][T10979] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  312.957778][T10979] team0: Port device netdevsim0 added
[  313.056526][T10980] team0: Port device netdevsim0 removed
[  313.058982][T10980] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  313.061339][T10980] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  313.362750][T10995] netlink: 'syz.0.1012': attribute type 10 has an invalid length.
[  313.369409][T10995] bond0: (slave netdevsim0): Releasing backup interface
[  313.435007][T10996] netlink: 'syz.0.1012': attribute type 10 has an invalid length.
[  313.435046][T10995] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  313.442316][T10995] team0: Port device netdevsim0 added
[  313.650546][T10996] team0: Port device netdevsim0 removed
[  313.653069][T10996] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  313.655282][T10996] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  313.825220][T10997] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  313.827780][T10997] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  313.830407][T10997] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  313.941130][T11000] Sensor A: =================  START STATUS  =================
[  313.943420][T11000] Sensor A: Test Pattern: 75% Colorbar
[  313.945496][T11000] Sensor A: Show Information: All
[  313.947062][T11000] Sensor A: Vertical Flip: false
[  313.948546][T11000] Sensor A: Horizontal Flip: false
[  313.950066][T11000] Sensor A: Brightness: 128
[  313.951426][T11000] Sensor A: Contrast: 128
[  313.952738][T11000] Sensor A: Hue: 0
[  313.953878][T11000] Sensor A: Saturation: 128
[  313.955365][T11000] Sensor A: ==================  END STATUS  ==================
[  314.098382][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'.
[  314.102332][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'.
[  314.105316][T11007] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1016'.
[  314.360027][T11013] netlink: 'syz.2.1017': attribute type 10 has an invalid length.
[  314.411201][T11018] netlink: 'syz.2.1017': attribute type 10 has an invalid length.
[  314.595185][T11013] bond0: (slave netdevsim0): Releasing backup interface
[  314.597486][T11013] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  314.600117][T11013] team0: Port device netdevsim0 added
[  314.607097][T11018] team0: Port device netdevsim0 removed
[  314.610763][T11018] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  314.613918][T11018] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  315.006832][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'.
[  315.537486][ T5304] Bluetooth: hci3: unexpected event for opcode 0x0c25
[  315.543277][T11034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1021'.
[  316.108956][T11049] netlink: 'syz.1.1024': attribute type 10 has an invalid length.
[  316.163129][T11050] netlink: 'syz.1.1024': attribute type 10 has an invalid length.
[  316.271825][T11049] bond0: (slave netdevsim0): Releasing backup interface
[  316.274520][T11049] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  316.277352][T11049] team0: Port device netdevsim0 added
[  316.281147][T11050] team0: Port device netdevsim0 removed
[  316.284046][T11050] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  316.287008][T11050] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  316.545984][ T1412] ieee802154 phy0 wpan0: encryption failed: -22
[  316.548325][ T1412] ieee802154 phy1 wpan1: encryption failed: -22
[  316.779220][ T5883] libceph: connect (1)[c::]:6789 error -13
[  316.785043][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  316.895095][T11068] netlink: 'syz.1.1028': attribute type 10 has an invalid length.
[  316.904455][T11068] bond0: (slave netdevsim0): Releasing backup interface
[  316.906707][T11068] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  316.909422][T11068] team0: Port device netdevsim0 added
[  316.912607][T11068] netlink: 'syz.1.1028': attribute type 10 has an invalid length.
[  316.916889][T11068] team0: Port device netdevsim0 removed
[  316.919202][T11068] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  316.921469][T11068] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  316.938189][T11059] ceph: No mds server is up or the cluster is laggy
[  317.046340][ T5883] libceph: connect (1)[c::]:6789 error -13
[  317.048692][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  317.625040][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'.
[  318.369807][T11094] netlink: 'syz.0.1036': attribute type 10 has an invalid length.
[  318.460496][T11095] netlink: 'syz.0.1036': attribute type 10 has an invalid length.
[  318.545177][T11094] bond0: (slave netdevsim0): Releasing backup interface
[  318.548000][T11094] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  318.554050][T11094] team0: Port device netdevsim0 added
[  318.559174][T11095] team0: Port device netdevsim0 removed
[  318.563200][T11095] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  318.566657][T11095] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  318.942394][T11108] syz.2.1037: attempt to access beyond end of device
[  318.942394][T11108] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0
[  318.946568][T11108] syz.2.1037: attempt to access beyond end of device
[  318.946568][T11108] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0
[  318.950190][T11108] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  318.963854][T11108] syz.2.1037: attempt to access beyond end of device
[  318.963854][T11108] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0
[  318.967733][T11108] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  318.970956][T11108] syz.2.1037: attempt to access beyond end of device
[  318.970956][T11108] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0
[  318.974919][T11108] syz.2.1037: attempt to access beyond end of device
[  318.974919][T11108] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0
[  318.978671][T11108] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  318.982794][T11108] syz.2.1037: attempt to access beyond end of device
[  318.982794][T11108] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0
[  318.986846][T11108] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  318.990357][T11108] syz.2.1037: attempt to access beyond end of device
[  318.990357][T11108] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0
[  319.020027][T11108] syz.2.1037: attempt to access beyond end of device
[  319.020027][T11108] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0
[  319.028254][T11108] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  319.032858][T11108] syz.2.1037: attempt to access beyond end of device
[  319.032858][T11108] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0
[  319.038826][T11108] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  319.045056][T11108] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[  319.045461][T11107] nbd2: detected capacity change from 0 to 67108884
[  319.046941][ T9752] block nbd2: Send control failed (result -89)
[  319.046954][ T9752] block nbd2: Request send failed, requeueing
[  319.047065][ T5304] block nbd2: Receive control failed (result -32)
[  319.047236][   T36] block nbd2: Dead connection, failed to find a fallback
[  319.047278][   T36] block nbd2: shutting down sockets
[  319.047288][   T36] blk_print_req_error: 45 callbacks suppressed
[  319.047293][   T36] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.047307][   T36] buffer_io_error: 40 callbacks suppressed
[  319.047312][   T36] Buffer I/O error on dev nbd2, logical block 0, async page read
[  319.047395][ T9752] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.047418][ T9752] Buffer I/O error on dev nbd2, logical block 0, async page read
[  319.047498][ T9752] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.047513][ T9752] Buffer I/O error on dev nbd2, logical block 0, async page read
[  319.047558][ T9752] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.047570][ T9752] Buffer I/O error on dev nbd2, logical block 0, async page read
[  319.047618][ T9752] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.047631][ T9752] Buffer I/O error on dev nbd2, logical block 0, async page read
[  319.047678][ T9752] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.047691][ T9752] Buffer I/O error on dev nbd2, logical block 0, async page read
[  319.047736][ T9752] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.047749][ T9752] Buffer I/O error on dev nbd2, logical block 0, async page read
[  319.047790][ T9752] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.047803][ T9752] Buffer I/O error on dev nbd2, logical block 0, async page read
[  319.047824][ T9752] ldm_validate_partition_table(): Disk read failed.
[  319.047853][ T9752] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.047867][ T9752] Buffer I/O error on dev nbd2, logical block 0, async page read
[  319.047909][ T9752] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  319.047951][ T9752] Buffer I/O error on dev nbd2, logical block 0, async page read
[  319.048844][ T9752] Dev nbd2: unable to read RDB block 0
[  319.049029][ T9752]  nbd2: unable to read partition table
[  319.050218][ T9752] ldm_validate_partition_table(): Disk read failed.
[  319.124266][ T9752] Dev nbd2: unable to read RDB block 0
[  319.126150][ T9752]  nbd2: unable to read partition table
[  319.222297][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'.
[  320.404795][T11127] can0: slcan on ttyS3.
[  320.417194][T11127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1044'.
[  320.888403][T11147] netlink: 'syz.3.1046': attribute type 10 has an invalid length.
[  320.942906][T11149] netlink: 'syz.3.1046': attribute type 10 has an invalid length.
[  321.104335][T11147] bond0: (slave netdevsim0): Releasing backup interface
[  321.106684][T11147] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  321.109394][T11147] team0: Port device netdevsim0 added
[  321.112618][T11149] team0: Port device netdevsim0 removed
[  321.115110][T11149] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  321.117465][T11149] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  321.217716][T11119] can0 (unregistered): slcan off ttyS3.
[  321.251667][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'.
[  321.805554][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'.
[  321.821667][T11180] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  321.824678][T11180] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  321.827183][T11180] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  321.829929][T11180] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  322.100847][T11180] vxlan0: entered promiscuous mode
[  322.416106][T11188] netlink: 'syz.2.1051': attribute type 10 has an invalid length.
[  323.096493][T11198] netlink: 'syz.3.1052': attribute type 10 has an invalid length.
[  323.115340][T11198] bond0: (slave netdevsim0): Releasing backup interface
[  323.121093][T11199] netlink: 'syz.1.1053': attribute type 10 has an invalid length.
[  323.123790][T11198] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  323.126611][T11198] team0: Port device netdevsim0 added
[  323.130036][T11198] netlink: 'syz.3.1052': attribute type 10 has an invalid length.
[  323.169625][T11198] team0: Port device netdevsim0 removed
[  323.172197][T11198] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  323.174615][T11198] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  323.891332][T11212] netlink: 'syz.2.1056': attribute type 10 has an invalid length.
[  323.924850][T11212] bond0: (slave netdevsim0): Releasing backup interface
[  323.927509][T11212] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  323.930236][T11212] team0: Port device netdevsim0 added
[  323.933592][T11212] netlink: 'syz.2.1056': attribute type 10 has an invalid length.
[  324.135494][T11212] team0: Port device netdevsim0 removed
[  324.138374][T11212] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  324.141056][T11212] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  324.188664][T11215] netlink: 'syz.3.1057': attribute type 10 has an invalid length.
[  324.192901][T11215] bond0: (slave netdevsim0): Releasing backup interface
[  324.195500][T11215] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  324.198652][T11215] team0: Port device netdevsim0 added
[  324.203320][T11215] netlink: 'syz.3.1057': attribute type 10 has an invalid length.
[  324.208789][T11215] team0: Port device netdevsim0 removed
[  324.211410][T11215] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  324.213814][T11215] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  324.463060][T11204] lo speed is unknown, defaulting to 1000
[  324.735031][T11225] warning: `syz.0.1061' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  324.993700][T11233] netlink: 'syz.0.1062': attribute type 10 has an invalid length.
[  325.630574][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'.
[  325.848232][T11248] tc_dump_action: action bad kind
[  325.953434][T11249] netlink: 'syz.3.1065': attribute type 10 has an invalid length.
[  325.962781][T11249] bond0: (slave netdevsim0): Releasing backup interface
[  325.975095][T11249] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  325.989146][T11249] team0: Port device netdevsim0 added
[  325.996225][T11249] netlink: 'syz.3.1065': attribute type 10 has an invalid length.
[  326.009658][T11249] team0: Port device netdevsim0 removed
[  326.017518][T11249] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  326.021495][T11249] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  327.888291][T11273] cgroup: No subsys list or none specified
[  328.688896][T11287] netlink: 'syz.3.1076': attribute type 3 has an invalid length.
[  328.691921][T11287] netlink: 'syz.3.1076': attribute type 1 has an invalid length.
[  328.695267][T11287] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1076'.
[  329.102401][T11301] netlink: 'syz.2.1077': attribute type 10 has an invalid length.
[  329.124852][T11301] bond0: (slave netdevsim0): Releasing backup interface
[  329.127975][T11301] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  329.132530][T11301] team0: Port device netdevsim0 added
[  329.137268][T11301] netlink: 'syz.2.1077': attribute type 10 has an invalid length.
[  329.145267][T11301] team0: Port device netdevsim0 removed
[  329.149802][T11301] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  329.152516][T11301] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  329.671917][T11304] syz.0.1079: attempt to access beyond end of device
[  329.671917][T11304] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0
[  329.677005][T11304] syz.0.1079: attempt to access beyond end of device
[  329.677005][T11304] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0
[  329.772298][T11309] netlink: 'syz.1.1080': attribute type 10 has an invalid length.
[  329.828200][T11310] netlink: 'syz.1.1080': attribute type 10 has an invalid length.
[  329.875405][T11309] bond0: (slave netdevsim0): Releasing backup interface
[  330.081184][T11309] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  330.084349][T11309] team0: Port device netdevsim0 added
[  330.118659][T11310] team0: Port device netdevsim0 removed
[  330.121101][T11310] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  330.123518][T11310] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  331.244147][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'.
[  332.086056][T11355] infiniband syz0: set active
[  332.095646][T11355] bridge_slave_0: left allmulticast mode
[  332.097856][T11355] bridge_slave_0: left promiscuous mode
[  332.117866][T11355] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.168966][T11355] bridge_slave_1: left allmulticast mode
[  332.171398][T11355] bridge_slave_1: left promiscuous mode
[  332.173868][T11355] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.195463][T11355] bond0: (slave bond_slave_0): Releasing backup interface
[  332.206272][T11355] bond_slave_0: left promiscuous mode
[  332.210626][T11355] bond0: (slave bond_slave_1): Releasing backup interface
[  332.213488][T11355] bond_slave_1: left promiscuous mode
[  332.229666][T11355] team0: Port device team_slave_0 removed
[  332.235204][T11355] team0: Port device team_slave_1 removed
[  332.237254][T11355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.239484][T11355] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.242441][T11355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.246099][T11355] batman_adv: batadv0: Removing interface: batadv_slave_1
[  332.252209][T11355] bond0: (slave netdevsim0): Releasing backup interface
[  332.255077][T11355] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  332.261299][ T6481] lo speed is unknown, defaulting to 1000
[  332.341893][T11352] lo speed is unknown, defaulting to 1000
[  332.388942][T11362] netlink: 'syz.1.1089': attribute type 10 has an invalid length.
[  332.416750][T11355] geneve2: entered promiscuous mode
[  332.418350][T11355] geneve2: entered allmulticast mode
[  332.421145][T11355] batman_adv: batadv0: Adding interface: geneve2
[  332.434550][T11355] batman_adv: batadv0: Interface activated: geneve2
[  332.445318][T11362] bond0: (slave netdevsim0): Releasing backup interface
[  332.445341][T11361] netlink: 'syz.1.1089': attribute type 10 has an invalid length.
[  332.449772][T11362] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  332.452525][T11362] team0: Port device netdevsim0 added
[  332.607509][T11361] team0: Port device netdevsim0 removed
[  332.612899][T11361] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  332.615837][T11361] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  332.837132][T11368] netlink: 'syz.2.1091': attribute type 10 has an invalid length.
[  332.840478][T11368] team0: Port device netdevsim0 added
[  332.843639][T11368] netlink: 'syz.2.1091': attribute type 10 has an invalid length.
[  333.180753][T11368] team0: Port device netdevsim0 removed
[  333.185433][T11368] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  333.188797][T11368] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  333.317117][T11376] 9pnet_virtio: no channels available for device syz
[  334.695310][T11406] netlink: 'syz.0.1101': attribute type 10 has an invalid length.
[  335.383570][T11416] netlink: 'syz.3.1102': attribute type 10 has an invalid length.
[  335.659910][T11416] bond0: (slave netdevsim0): Releasing backup interface
[  335.663310][T11416] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  335.667047][T11416] team0: Port device netdevsim0 added
[  335.774234][T11414] netlink: 'syz.3.1102': attribute type 10 has an invalid length.
[  335.860431][T11414] team0: Port device netdevsim0 removed
[  335.863095][T11414] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  335.865829][T11414] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  335.870319][T11415] lo speed is unknown, defaulting to 1000
[  335.952065][T11426] netlink: 'syz.1.1104': attribute type 10 has an invalid length.
[  335.958769][T11426] bond0: (slave netdevsim0): Releasing backup interface
[  335.962527][T11426] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  335.967687][T11426] team0: Port device netdevsim0 added
[  336.254723][T11426] netlink: 'syz.1.1104': attribute type 10 has an invalid length.
[  336.274231][   T63] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  336.376131][T11426] team0: Port device netdevsim0 removed
[  336.378609][T11426] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  336.383254][T11426] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  336.444264][   T63] usb 8-1: Using ep0 maxpacket: 32
[  336.448429][   T63] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  336.450745][   T63] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  336.453861][   T63] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  336.460293][   T63] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  336.464088][   T63] usb 8-1: config 0 interface 0 has no altsetting 0
[  336.483644][   T63] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  336.487764][   T63] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  336.490237][   T63] usb 8-1: Product: syz
[  336.491638][   T63] usb 8-1: Manufacturer: syz
[  336.494176][   T63] usb 8-1: SerialNumber: syz
[  336.497224][   T63] usb 8-1: config 0 descriptor??
[  336.501982][   T63] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  336.504431][   T39] audit: type=1326 audit(1736230022.548:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.2.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[  336.507410][   T63] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  336.514607][   T39] audit: type=1326 audit(1736230022.548:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.2.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[  336.520889][   T39] audit: type=1326 audit(1736230022.548:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.2.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[  336.528926][   T39] audit: type=1326 audit(1736230022.548:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.2.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[  336.535568][   T39] audit: type=1326 audit(1736230022.548:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.2.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[  336.541769][   T39] audit: type=1326 audit(1736230022.548:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.2.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[  336.553931][   T39] audit: type=1326 audit(1736230022.558:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.2.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[  336.615690][   T39] audit: type=1326 audit(1736230022.558:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.2.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[  336.621860][   T39] audit: type=1326 audit(1736230022.558:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.2.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[  336.628199][   T39] audit: type=1326 audit(1736230022.558:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.2.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe3579 code=0x7ffc0000
[  336.931170][T11444] overlayfs: missing 'lowerdir'
[  336.997388][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'.
[  337.945423][T11457] netlink: 'syz.0.1112': attribute type 10 has an invalid length.
[  339.028063][T11466] netlink: 'syz.1.1114': attribute type 10 has an invalid length.
[  339.033933][T11466] bond0: (slave netdevsim0): Releasing backup interface
[  339.038807][T11466] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  339.043747][T11466] team0: Port device netdevsim0 added
[  339.066645][T11465] netlink: 'syz.1.1114': attribute type 10 has an invalid length.
[  339.072421][T11465] team0: Port device netdevsim0 removed
[  339.074730][T11465] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  339.076794][T11465] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  339.094296][   T30] usb 8-1: USB disconnect, device number 5
[  339.096801][   T30] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  339.432738][T11474] netlink: 'syz.0.1116': attribute type 10 has an invalid length.
[  339.537325][T11475] netlink: 'syz.0.1116': attribute type 10 has an invalid length.
[  339.614872][T11474] bond0: (slave netdevsim0): Releasing backup interface
[  339.623360][T11474] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  339.626558][T11474] team0: Port device netdevsim0 added
[  340.231950][T11475] team0: Port device netdevsim0 removed
[  340.235017][T11475] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  340.237351][T11475] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  340.442197][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'.
[  340.471255][T11492] syz.1.1119: attempt to access beyond end of device
[  340.471255][T11492] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0
[  340.482062][T11492] syz.1.1119: attempt to access beyond end of device
[  340.482062][T11492] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0
[  340.569578][T11498] netlink: 'syz.2.1121': attribute type 10 has an invalid length.
[  341.376779][T11512] tun0: tun_chr_ioctl cmd 1074025675
[  341.378452][T11512] tun0: persist enabled
[  341.410203][T11512] tun0: tun_chr_ioctl cmd 1074025675
[  341.413953][T11512] tun0: persist enabled
[  342.337898][T11527] netlink: 'syz.3.1126': attribute type 10 has an invalid length.
[  342.577257][T11528] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1127'.
[  342.601454][T11528] loop9: detected capacity change from 0 to 6
[  342.719522][T11528] Dev loop9: unable to read RDB block 6
[  342.721711][T11528]  loop9: unable to read partition table
[  342.723875][T11528] loop9: partition table beyond EOD, truncated
[  342.726233][T11528] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  342.726233][T11528] 
) failed (rc=-5)
[  342.999481][T11537] netlink: 'syz.1.1128': attribute type 10 has an invalid length.
[  343.097923][T11537] bond0: (slave netdevsim0): Releasing backup interface
[  343.101167][T11537] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  343.105660][T11537] team0: Port device netdevsim0 added
[  343.106283][T11538] netlink: 'syz.1.1128': attribute type 10 has an invalid length.
[  343.274562][T11538] team0: Port device netdevsim0 removed
[  343.276943][T11538] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  343.279290][T11538] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  343.310425][T11534] Sensor A: =================  START STATUS  =================
[  343.312693][T11534] Sensor A: Test Pattern: 75% Colorbar
[  343.314358][T11534] Sensor A: Show Information: All
[  343.315837][T11534] Sensor A: Vertical Flip: false
[  343.317286][T11534] Sensor A: Horizontal Flip: false
[  343.318779][T11534] Sensor A: Brightness: 128
[  343.320117][T11534] Sensor A: Contrast: 128
[  343.321383][T11534] Sensor A: Hue: 0
[  343.322477][T11534] Sensor A: Saturation: 128
[  343.325113][T11534] Sensor A: ==================  END STATUS  ==================
[  343.656307][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'.
[  343.977161][T11551] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1132'.
[  343.980784][T11551] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1132'.
[  344.485756][T11565] netlink: 'syz.0.1133': attribute type 10 has an invalid length.
[  345.193990][T11576] netlink: 'syz.3.1138': attribute type 10 has an invalid length.
[  345.198630][T11576] bond0: (slave netdevsim0): Releasing backup interface
[  345.201480][T11576] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  345.206649][T11576] team0: Port device netdevsim0 added
[  345.213284][T11576] netlink: 'syz.3.1138': attribute type 10 has an invalid length.
[  345.222059][T11576] team0: Port device netdevsim0 removed
[  345.227303][T11576] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  345.230127][T11576] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  346.485247][T11593] Sensor A: =================  START STATUS  =================
[  346.487573][T11593] Sensor A: Test Pattern: 75% Colorbar
[  346.489293][T11593] Sensor A: Show Information: All
[  346.491030][T11593] Sensor A: Vertical Flip: false
[  346.492691][T11593] Sensor A: Horizontal Flip: false
[  346.494250][T11593] Sensor A: Brightness: 128
[  346.495804][T11593] Sensor A: Contrast: 128
[  346.504286][T11593] Sensor A: Hue: 0
[  346.505410][T11593] Sensor A: Saturation: 128
[  346.506701][T11593] Sensor A: ==================  END STATUS  ==================
[  347.067741][   T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  347.386185][T11621] netlink: 'syz.2.1144': attribute type 10 has an invalid length.
[  347.433356][T11620] netlink: 'syz.3.1145': attribute type 10 has an invalid length.
[  347.485599][T11625] netlink: 'syz.3.1145': attribute type 10 has an invalid length.
[  347.525338][T11620] bond0: (slave netdevsim0): Releasing backup interface
[  347.619893][T11620] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  347.623379][T11620] team0: Port device netdevsim0 added
[  347.629288][T11625] team0: Port device netdevsim0 removed
[  347.633378][T11625] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  347.636372][T11625] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  348.397711][T11640] ALSA: mixer_oss: invalid OSS volume '00000000000000000000'
[  348.399910][T11640] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ'
[  349.011831][T11646] netlink: 'syz.3.1152': attribute type 4 has an invalid length.
[  357.609547][T11675] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  357.612566][T11675] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  357.617833][T11675] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  357.620679][T11675] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  357.675314][T11675] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  357.678225][T11675] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  357.680893][T11675] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  357.683600][T11675] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  357.721568][T11675] geneve2: entered promiscuous mode
[  357.724048][T11675] geneve2: entered allmulticast mode
[  358.060191][T11688] netlink: 'syz.3.1157': attribute type 10 has an invalid length.
[  358.074041][T11688] bond0: (slave netdevsim0): Releasing backup interface
[  358.080861][T11688] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  358.086227][T11688] team0: Port device netdevsim0 added
[  358.092199][T11688] netlink: 'syz.3.1157': attribute type 10 has an invalid length.
[  358.426407][T11688] team0: Port device netdevsim0 removed
[  358.428819][T11688] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  358.431024][T11688] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  358.810534][T11697] cgroup: No subsys list or none specified
[  359.564389][T11707] netlink: 'syz.2.1161': attribute type 10 has an invalid length.
[  359.568766][T11707] bond0: (slave netdevsim0): Releasing backup interface
[  359.572211][T11707] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  359.577319][T11707] team0: Port device netdevsim0 added
[  359.582156][T11707] netlink: 'syz.2.1161': attribute type 10 has an invalid length.
[  359.615925][T11707] team0: Port device netdevsim0 removed
[  359.621293][T11707] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  359.624192][T11707] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  359.937793][T11713] ALSA: mixer_oss: invalid OSS volume '00000000000000000000'
[  359.940071][T11713] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ'
[  360.765553][T11723] netlink: 'syz.2.1165': attribute type 10 has an invalid length.
[  361.899549][T11741] netlink: 'syz.2.1168': attribute type 10 has an invalid length.
[  361.961818][T11743] netlink: 'syz.2.1168': attribute type 10 has an invalid length.
[  362.345250][T11741] bond0: (slave netdevsim0): Releasing backup interface
[  362.428199][T11741] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  362.431023][T11741] team0: Port device netdevsim0 added
[  362.439445][T11743] team0: Port device netdevsim0 removed
[  362.442138][T11743] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  362.444682][T11743] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  362.892618][   T39] kauditd_printk_skb: 164 callbacks suppressed
[  362.892635][   T39] audit: type=1804 audit(1736230304.930:325): pid=11760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1173" name="/newroot/280/file0/bus" dev="ramfs" ino=30563 res=1 errno=0
[  365.479301][T11790] netlink: 'syz.1.1181': attribute type 10 has an invalid length.
[  365.568777][T11789] netlink: 'syz.1.1181': attribute type 10 has an invalid length.
[  365.651191][T11790] bond0: (slave netdevsim0): Releasing backup interface
[  365.656254][T11790] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  365.659213][T11790] team0: Port device netdevsim0 added
[  365.663260][T11789] team0: Port device netdevsim0 removed
[  365.669044][T11789] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  365.672243][T11789] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  365.704515][T11792] tun0: tun_chr_ioctl cmd 1074025675
[  365.706935][T11792] tun0: persist enabled
[  365.717921][T11792] tun0: tun_chr_ioctl cmd 1074025675
[  365.719760][T11792] tun0: persist enabled
[  366.362757][T11806] netlink: 'syz.1.1191': attribute type 10 has an invalid length.
[  366.420268][T11807] netlink: 'syz.1.1191': attribute type 10 has an invalid length.
[  366.590333][T11808] netlink: 'syz.2.1182': attribute type 10 has an invalid length.
[  366.607609][T11806] bond0: (slave netdevsim0): Releasing backup interface
[  366.620158][T11806] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  366.629756][T11806] team0: Port device netdevsim0 added
[  366.639299][T11807] team0: Port device netdevsim0 removed
[  366.643529][T11807] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  366.644822][T11813] netlink: 'syz.2.1182': attribute type 10 has an invalid length.
[  366.646710][T11807] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  366.667896][T11808] bond0: (slave netdevsim0): Releasing backup interface
[  366.672459][T11808] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  366.680141][T11808] team0: Port device netdevsim0 added
[  366.686597][T11813] team0: Port device netdevsim0 removed
[  366.691243][T11813] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  366.692131][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'.
[  366.693664][T11813] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  367.662424][T11828] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  367.670757][T11828] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  368.026739][T11829] Process accounting resumed
[  368.322671][T11847] netlink: 'syz.3.1193': attribute type 10 has an invalid length.
[  368.430194][T11848] netlink: 'syz.3.1193': attribute type 10 has an invalid length.
[  368.439172][T11845] netlink: 'syz.1.1192': attribute type 10 has an invalid length.
[  368.487875][T11851] netlink: 'syz.1.1192': attribute type 10 has an invalid length.
[  368.568099][T11847] bond0: (slave netdevsim0): Releasing backup interface
[  368.588128][T11847] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  368.593593][T11847] team0: Port device netdevsim0 added
[  368.600277][T11848] team0: Port device netdevsim0 removed
[  368.603149][T11848] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  368.606168][T11848] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  368.613458][T11845] bond0: (slave netdevsim0): Releasing backup interface
[  368.616331][T11845] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  368.626123][T11845] team0: Port device netdevsim0 added
[  368.631919][T11851] team0: Port device netdevsim0 removed
[  368.635133][T11851] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  368.638542][T11851] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  369.011633][T11857] erspan0: entered promiscuous mode
[  369.013780][T11857] vlan2: entered promiscuous mode
[  369.242669][T11866] bond0: (slave netdevsim0): Releasing backup interface
[  369.245835][T11866] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  369.251234][T11866] team0: Port device netdevsim0 added
[  369.267898][T11866] team0: Port device netdevsim0 removed
[  369.273415][T11866] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  369.276464][T11866] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  369.734818][T11871] tun0: tun_chr_ioctl cmd 1074025675
[  369.736722][T11871] tun0: persist enabled
[  369.743046][T11871] tun0: tun_chr_ioctl cmd 1074025675
[  369.745362][T11871] tun0: persist enabled
[  369.814575][T11875] bond0: (slave netdevsim0): Releasing backup interface
[  369.818191][T11875] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  369.824643][T11875] team0: Port device netdevsim0 added
[  370.105755][T11875] team0: Port device netdevsim0 removed
[  370.108344][T11875] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  370.110931][T11875] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  370.385112][T11884] bond0: (slave netdevsim0): Releasing backup interface
[  370.389701][T11884] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  370.398822][T11884] team0: Port device netdevsim0 added
[  370.411287][T11884] team0: Port device netdevsim0 removed
[  370.416585][T11884] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  370.419493][T11884] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  371.058521][T11889] bridge_slave_0: left allmulticast mode
[  371.060230][T11889] bridge_slave_0: left promiscuous mode
[  371.063393][T11889] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.067190][T11889] bridge_slave_1: left allmulticast mode
[  371.068844][T11889] bridge_slave_1: left promiscuous mode
[  371.070506][T11889] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.076331][T11889] bond0: (slave bond_slave_0): Releasing backup interface
[  371.079039][T11889] bond_slave_0: left promiscuous mode
[  371.083153][T11889] bond0: (slave bond_slave_1): Releasing backup interface
[  371.086134][T11889] bond_slave_1: left promiscuous mode
[  371.095645][T11889] team0: Port device team_slave_0 removed
[  371.107124][T11889] team0: Port device team_slave_1 removed
[  371.124993][T11889] bond0: (slave netdevsim0): Releasing backup interface
[  371.129295][T11889] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  371.211777][T11889] geneve2: entered promiscuous mode
[  371.213329][T11889] geneve2: entered allmulticast mode
[  371.452823][T11907] validate_nla: 6 callbacks suppressed
[  371.452861][T11907] netlink: 'syz.1.1204': attribute type 10 has an invalid length.
[  371.465275][T11907] bond0: (slave netdevsim0): Releasing backup interface
[  371.475477][T11907] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  371.484874][T11907] team0: Port device netdevsim0 added
[  371.491222][T11907] netlink: 'syz.1.1204': attribute type 10 has an invalid length.
[  371.502620][T11902] fuse: root generation should be zero
[  371.503676][T11907] team0: Port device netdevsim0 removed
[  371.511011][T11907] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  371.513850][T11907] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  371.774985][T11914] netlink: 'syz.0.1207': attribute type 10 has an invalid length.
[  371.827042][T11915] netlink: 'syz.0.1207': attribute type 10 has an invalid length.
[  371.958577][T11914] bond0: (slave netdevsim0): Releasing backup interface
[  371.961507][T11914] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  371.965587][T11914] team0: Port device netdevsim0 added
[  372.059101][T11915] team0: Port device netdevsim0 removed
[  372.062696][T11915] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  372.065722][T11915] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  372.279189][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'.
[  372.365456][T11923] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  372.368193][T11923] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  372.370800][T11923] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  372.373339][T11923] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  372.415376][T11923] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  372.418120][T11923] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  372.422085][T11923] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  372.424945][T11923] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  372.435749][T11923] geneve2: entered promiscuous mode
[  372.437399][T11923] geneve2: entered allmulticast mode
[  372.638877][T11928] netlink: 'syz.0.1211': attribute type 10 has an invalid length.
[  372.645147][T11928] bond0: (slave netdevsim0): Releasing backup interface
[  372.647806][T11928] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  372.653748][T11928] team0: Port device netdevsim0 added
[  372.659650][T11928] netlink: 'syz.0.1211': attribute type 10 has an invalid length.
[  372.698878][T11928] team0: Port device netdevsim0 removed
[  372.704990][T11928] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  372.707879][T11928] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  373.350300][T11940] netlink: 'syz.3.1213': attribute type 10 has an invalid length.
[  373.354227][T11940] team0: Port device netdevsim0 added
[  373.357912][T11940] netlink: 'syz.3.1213': attribute type 10 has an invalid length.
[  373.967298][T11940] team0: Port device netdevsim0 removed
[  373.971086][T11940] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  373.974325][T11940] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  374.745836][T11965] netlink: 'syz.1.1218': attribute type 9 has an invalid length.
[  375.011779][T11969] netlink: 'syz.0.1219': attribute type 10 has an invalid length.
[  375.277893][T11969] bond0: (slave netdevsim0): Releasing backup interface
[  375.281126][T11969] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  375.285247][T11969] team0: Port device netdevsim0 added
[  375.306301][T11970] team0: Port device netdevsim0 removed
[  375.308945][T11970] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  375.311251][T11970] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  375.704155][T11983] kernel profiling enabled (shift: 63)
[  375.706036][T11983] profiling shift: 63 too large
[  375.985588][T11985] bond0: (slave netdevsim0): Releasing backup interface
[  375.988662][T11985] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  375.993237][T11985] team0: Port device netdevsim0 added
[  375.998784][T11986] team0: Port device netdevsim0 removed
[  376.001421][T11986] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  376.004040][T11986] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  376.167911][T11977] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1221'.
[  376.522808][T11994] block device autoloading is deprecated and will be removed.
[  376.628977][T12000] validate_nla: 4 callbacks suppressed
[  376.629014][T12000] netlink: 'syz.3.1225': attribute type 10 has an invalid length.
[  376.635894][T12000] bond0: (slave netdevsim0): Releasing backup interface
[  376.639145][T12000] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  376.645634][T12000] team0: Port device netdevsim0 added
[  376.650585][T12000] netlink: 'syz.3.1225': attribute type 10 has an invalid length.
[  376.669638][T12000] team0: Port device netdevsim0 removed
[  376.676907][T12000] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  376.679728][T12000] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  376.777090][T12002] program syz.2.1227 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  376.779903][T12002] ata1.00: invalid transfer count 0
[  377.206086][T12009] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  377.642621][T12009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.645580][T12009] bond_slave_0: left promiscuous mode
[  377.649998][T12009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.653735][T12009] bond_slave_1: left promiscuous mode
[  377.658237][T12009] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  377.661092][T12009] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  377.664404][T12009] bond0 (unregistering): Released all slaves
[  377.990668][ T1412] ieee802154 phy0 wpan0: encryption failed: -22
[  377.992682][ T1412] ieee802154 phy1 wpan1: encryption failed: -22
[  378.644831][T12035] netlink: 'syz.2.1235': attribute type 10 has an invalid length.
[  378.678436][T12035] bond0: (slave netdevsim0): Releasing backup interface
[  378.682418][T12035] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  378.687760][T12035] team0: Port device netdevsim0 added
[  378.693749][T12035] netlink: 'syz.2.1235': attribute type 10 has an invalid length.
[  378.702110][T12035] team0: Port device netdevsim0 removed
[  378.707761][T12035] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  378.710604][T12035] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  379.493523][   T39] audit: type=1326 audit(1736230321.530:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  379.500020][   T39] audit: type=1326 audit(1736230321.540:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  379.508027][   T39] audit: type=1326 audit(1736230321.550:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1237" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  379.514754][   T39] audit: type=1326 audit(1736230321.550:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  379.521142][   T39] audit: type=1326 audit(1736230321.550:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1237" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  379.575036][T12051] netlink: 'syz.2.1239': attribute type 10 has an invalid length.
[  379.634611][T12052] netlink: 'syz.2.1239': attribute type 10 has an invalid length.
[  379.707181][   T39] audit: type=1326 audit(1736230321.550:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  379.812908][T12043] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  379.814661][   T39] audit: type=1326 audit(1736230321.550:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1237" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  379.816661][T12043] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  379.825578][   T39] audit: type=1326 audit(1736230321.550:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  379.828285][T12043] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  379.828317][T12043] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  379.837106][   T39] audit: type=1326 audit(1736230321.550:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1237" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  379.838708][T12043] vxlan0: entered promiscuous mode
[  379.841905][   T39] audit: type=1326 audit(1736230321.550:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  379.874289][T12043] vxlan0: entered allmulticast mode
[  379.882547][T12043] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  379.886333][T12043] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  379.889997][T12043] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  379.893342][T12043] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  379.919936][T12051] bond0: (slave netdevsim0): Releasing backup interface
[  379.922440][T12051] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  379.926493][T12051] team0: Port device netdevsim0 added
[  379.931079][T12052] team0: Port device netdevsim0 removed
[  379.933953][T12052] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  379.936412][T12052] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  380.180181][T12061] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  380.715579][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'.
[  380.967113][T11684] udevd[11684]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  381.255485][T12082] netlink: 'syz.2.1246': attribute type 4 has an invalid length.
[  381.321384][T12083] netlink: 'syz.2.1246': attribute type 4 has an invalid length.
[  381.372168][T12082] infiniband syz0: set down
[  381.376997][T12083] infiniband syz0: set active
[  381.379388][ T6000] lo speed is unknown, defaulting to 1000
[  381.381202][ T6481] lo speed is unknown, defaulting to 1000
[  381.389013][ T6000] lo speed is unknown, defaulting to 1000
[  381.505814][T12085] netlink: 'syz.3.1247': attribute type 10 has an invalid length.
[  381.614086][T12086] netlink: 'syz.3.1247': attribute type 10 has an invalid length.
[  381.759753][T12085] bond0: (slave netdevsim0): Releasing backup interface
[  381.764936][T12085] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  381.768898][T12085] team0: Port device netdevsim0 added
[  381.776851][T12086] team0: Port device netdevsim0 removed
[  381.779790][T12086] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  381.782668][T12086] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  382.237005][T12099] netlink: 'syz.3.1250': attribute type 10 has an invalid length.
[  383.239285][T12119] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  383.241803][T12119] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  383.344881][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1256'.
[  383.827662][T12137] dvmrp1: entered allmulticast mode
[  384.149533][T12144] netlink: 'syz.1.1262': attribute type 10 has an invalid length.
[  384.944180][ T5945] Bluetooth: hci3: command 0x0406 tx timeout
[  385.013844][T12156] netlink: 'syz.1.1263': attribute type 10 has an invalid length.
[  385.021226][T12156] team0: Port device netdevsim0 added
[  385.031557][T12156] netlink: 'syz.1.1263': attribute type 10 has an invalid length.
[  385.039420][T12156] team0: Port device netdevsim0 removed
[  385.318633][T12161] netlink: 'syz.2.1266': attribute type 10 has an invalid length.
[  385.372972][T12160] netlink: 'syz.2.1266': attribute type 10 has an invalid length.
[  385.385510][T12161] bond0: (slave netdevsim0): Releasing backup interface
[  385.390967][T12161] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  385.393680][T12161] team0: Port device netdevsim0 added
[  385.401900][T12160] team0: Port device netdevsim0 removed
[  385.409214][T12160] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  385.412064][T12160] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  385.775545][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'.
[  385.778776][T12167] bridge_slave_1: left allmulticast mode
[  385.780459][T12167] bridge_slave_1: left promiscuous mode
[  385.782149][T12167] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.800476][T12167] bridge_slave_0: left allmulticast mode
[  385.802246][T12167] bridge_slave_0: left promiscuous mode
[  385.805169][T12167] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.232557][T12183] netlink: 'syz.0.1270': attribute type 10 has an invalid length.
[  386.243603][T12183] bond0: (slave netdevsim0): Releasing backup interface
[  386.246490][T12183] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  386.252398][T12183] team0: Port device netdevsim0 added
[  386.258350][T12183] netlink: 'syz.0.1270': attribute type 10 has an invalid length.
[  386.265556][T12183] team0: Port device netdevsim0 removed
[  386.271640][T12183] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  386.274602][T12183] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  387.087899][ T5945] Bluetooth: hci0: ACL packet too small
[  387.234222][   T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  387.504459][ T5945] Bluetooth: hci3: command 0x0406 tx timeout
[  387.765723][T12207] netlink: 'syz.1.1276': attribute type 10 has an invalid length.
[  387.770548][T12207] team0: Port device netdevsim0 added
[  387.774418][T12207] netlink: 'syz.1.1276': attribute type 10 has an invalid length.
[  387.781590][T12207] team0: Port device netdevsim0 removed
[  387.868920][   T39] kauditd_printk_skb: 10 callbacks suppressed
[  387.868953][   T39] audit: type=1800 audit(1736230329.870:346): pid=12208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1275" name="bus" dev="overlay" ino=1681 res=0 errno=0
[  388.832294][T12222] netlink: 'syz.3.1280': attribute type 11 has an invalid length.
[  389.407922][T12229] netlink: 'syz.0.1281': attribute type 10 has an invalid length.
[  389.424553][T12229] bond0: (slave netdevsim0): Releasing backup interface
[  389.429756][T12229] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  389.442362][T12229] team0: Port device netdevsim0 added
[  389.448034][T12229] netlink: 'syz.0.1281': attribute type 10 has an invalid length.
[  389.459563][T12229] team0: Port device netdevsim0 removed
[  389.465416][T12229] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  389.468300][T12229] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  389.989760][T12236] netlink: 'syz.3.1283': attribute type 10 has an invalid length.
[  390.591723][T12242] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  391.141001][T12251] netlink: 'syz.2.1286': attribute type 10 has an invalid length.
[  391.195588][T12255] netlink: 'syz.2.1286': attribute type 10 has an invalid length.
[  391.368727][T12251] bond0: (slave netdevsim0): Releasing backup interface
[  391.371913][T12251] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  391.375553][T12251] team0: Port device netdevsim0 added
[  391.381510][T12255] team0: Port device netdevsim0 removed
[  391.385088][T12255] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  391.387941][T12255] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  392.461888][T12274] netlink: 'syz.1.1290': attribute type 10 has an invalid length.
[  392.467143][T12274] team0: Port device netdevsim0 added
[  392.471896][T12274] netlink: 'syz.1.1290': attribute type 10 has an invalid length.
[  392.555958][T12274] team0: Port device netdevsim0 removed
[  392.891917][T12272] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  392.933562][T12279] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  392.948952][T12277] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  393.431204][T12288] netlink: 'syz.1.1293': attribute type 10 has an invalid length.
[  393.764239][  T143] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  393.916504][  T143] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  393.919343][  T143] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  393.923517][  T143] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  393.926324][  T143] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  393.928652][  T143] usb 7-1: Manufacturer: syz
[  393.931821][  T143] usb 7-1: config 0 descriptor??
[  393.974324][  T143] rc_core: IR keymap rc-hauppauge not found
[  393.977558][  T143] Registered IR keymap rc-empty
[  393.980697][  T143] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0
[  393.985436][  T143] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input22
[  395.222949][T12316] netlink: 'syz.1.1298': attribute type 10 has an invalid length.
[  395.277621][T12318] netlink: 'syz.1.1298': attribute type 10 has an invalid length.
[  395.451958][T12316] team0: Port device netdevsim0 added
[  395.458104][T12318] team0: Port device netdevsim0 removed
[  395.607509][ T5945] Bluetooth: hci0: unexpected event for opcode 0x0c12
[  396.156354][T12328] overlayfs: missing 'lowerdir'
[  396.168342][T12328] xt_limit: Overflow, try lower: 0/0
[  396.502374][   T63] usb 7-1: USB disconnect, device number 5
[  396.911064][T12339] netlink: 'syz.3.1305': attribute type 10 has an invalid length.
[  398.639825][T12361] netlink: 'syz.2.1309': attribute type 10 has an invalid length.
[  398.707293][T12362] netlink: 'syz.2.1309': attribute type 10 has an invalid length.
[  399.053832][T12361] bond0: (slave netdevsim0): Releasing backup interface
[  399.056606][T12361] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  399.059680][T12361] team0: Port device netdevsim0 added
[  399.067391][T12362] team0: Port device netdevsim0 removed
[  399.070987][T12362] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  399.074212][T12362] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  399.604651][T12381] netlink: 'syz.2.1314': attribute type 10 has an invalid length.
[  399.665109][ T5945] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  399.674200][ T5945] Bluetooth: hci0: Injecting HCI hardware error event
[  399.678887][ T5945] Bluetooth: hci0: hardware error 0x00
[  401.218694][T12411] netlink: 'syz.3.1327': attribute type 12 has an invalid length.
[  401.445869][T12425] binder: 12415:12425 ioctl 4018620d 0 returned -22
[  401.754226][ T5945] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  402.128776][T12448] netlink: 'syz.3.1322': attribute type 10 has an invalid length.
[  402.174910][T12449] netlink: 'syz.3.1322': attribute type 10 has an invalid length.
[  402.286199][T12448] bond0: (slave netdevsim0): Releasing backup interface
[  402.335693][T12448] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  402.342141][T12448] team0: Port device netdevsim0 added
[  402.355802][T12449] team0: Port device netdevsim0 removed
[  402.360036][T12449] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  402.362746][T12449] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  402.822099][T12457] netlink: 'syz.1.1323': attribute type 10 has an invalid length.
[  402.824981][T12457] team0: Port device netdevsim0 added
[  402.828435][T12457] netlink: 'syz.1.1323': attribute type 10 has an invalid length.
[  403.126312][T12457] team0: Port device netdevsim0 removed
[  403.594222][T12469] netlink: 'syz.0.1326': attribute type 10 has an invalid length.
[  404.473118][T12484] netlink: 'syz.1.1331': attribute type 4 has an invalid length.
[  404.483345][T12484] netlink: 'syz.1.1331': attribute type 4 has an invalid length.
[  405.597575][T12504] netlink: 'syz.3.1342': attribute type 10 has an invalid length.
[  405.608455][T12504] bond0: (slave netdevsim0): Releasing backup interface
[  405.612178][T12504] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  405.618432][T12504] team0: Port device netdevsim0 added
[  405.623228][T12504] netlink: 'syz.3.1342': attribute type 10 has an invalid length.
[  405.634257][T12504] team0: Port device netdevsim0 removed
[  405.645785][T12504] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  405.649932][T12504] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  405.740001][T12505] netlink: 'syz.0.1334': attribute type 10 has an invalid length.
[  405.785607][T12506] netlink: 'syz.0.1334': attribute type 10 has an invalid length.
[  405.831460][T12505] bond0: (slave netdevsim0): Releasing backup interface
[  405.839613][T12505] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  405.847814][T12505] team0: Port device netdevsim0 added
[  405.916584][T12506] team0: Port device netdevsim0 removed
[  405.919266][T12506] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  405.921538][T12506] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  406.490536][T12525] netlink: 'syz.3.1336': attribute type 10 has an invalid length.
[  406.547402][T12527] netlink: 'syz.3.1336': attribute type 10 has an invalid length.
[  406.551863][T12525] bond0: (slave netdevsim0): Releasing backup interface
[  406.568689][T12525] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  406.583480][T12525] team0: Port device netdevsim0 added
[  406.589717][T12527] team0: Port device netdevsim0 removed
[  406.593981][T12527] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  406.597118][T12527] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  407.472500][T12538] netlink: 'syz.3.1339': attribute type 9 has an invalid length.
[  407.993471][T12536] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  407.997606][T12536] batman_adv: batadv0: Adding interface: gretap1
[  407.999940][T12536] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.009054][T12536] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  408.651964][T12554] netlink: 'syz.3.1344': attribute type 10 has an invalid length.
[  408.692173][T12554] bond0: (slave netdevsim0): Releasing backup interface
[  408.695799][T12554] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  408.701675][T12554] team0: Port device netdevsim0 added
[  408.715552][T12554] team0: Port device netdevsim0 removed
[  408.721759][T12554] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  408.724772][T12554] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  409.251777][T12564] bond0: (slave netdevsim0): Releasing backup interface
[  409.291693][T12564] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  409.361268][T12564] team0: Port device netdevsim0 added
[  409.368027][T12569] team0: Port device netdevsim0 removed
[  409.370495][T12569] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  409.373408][T12569] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  409.571042][T11684] udevd[11684]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  410.930569][T12590] erspan0: entered promiscuous mode
[  410.932794][T12590] vlan2: entered promiscuous mode
[  410.982417][T12588] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  410.986240][T12588] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  411.306865][T12600] netlink: 'syz.1.1353': attribute type 11 has an invalid length.
[  411.421777][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'.
[  412.140200][T12617] validate_nla: 3 callbacks suppressed
[  412.140211][T12617] netlink: 'syz.2.1356': attribute type 10 has an invalid length.
[  412.158320][T12617] bond0: (slave netdevsim0): Releasing backup interface
[  412.163792][T12617] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  412.168505][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806fad2000: rx timeout, send abort
[  412.170311][T12617] team0: Port device netdevsim0 added
[  412.351561][T12621] netlink: 'syz.1.1357': attribute type 10 has an invalid length.
[  412.360469][T12621] team0: Port device netdevsim0 added
[  412.361797][T12616] netlink: 'syz.2.1356': attribute type 10 has an invalid length.
[  412.385699][T12621] netlink: 'syz.1.1357': attribute type 10 has an invalid length.
[  412.388969][T12616] team0: Port device netdevsim0 removed
[  412.392072][T12616] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  412.395341][T12616] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  412.482842][T12621] team0: Port device netdevsim0 removed
[  412.672398][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806fad2000: abort rx timeout. Force session deactivation
[  413.111798][T12642] kernel profiling enabled (shift: 63)
[  413.113552][T12642] profiling shift: 63 too large
[  413.487917][T12644] netlink: 'syz.1.1362': attribute type 10 has an invalid length.
[  413.490722][T12644] team0: Port device netdevsim0 added
[  413.493461][T12644] netlink: 'syz.1.1362': attribute type 10 has an invalid length.
[  413.585534][T12644] team0: Port device netdevsim0 removed
[  413.886363][T12652] netlink: 'syz.0.1363': attribute type 10 has an invalid length.
[  413.940759][T12653] netlink: 'syz.0.1363': attribute type 10 has an invalid length.
[  414.013128][T12652] bond0: (slave netdevsim0): Releasing backup interface
[  414.017396][T12652] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  414.026904][T12652] team0: Port device netdevsim0 added
[  414.030814][T12653] team0: Port device netdevsim0 removed
[  414.033511][T12653] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  414.036010][T12653] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  415.049394][T12668] netlink: 'syz.0.1365': attribute type 9 has an invalid length.
[  415.627781][ T1134] Bluetooth: hci4: Frame reassembly failed (-84)
[  416.644471][  T143] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  416.699496][T12684] netlink: 'syz.1.1370': attribute type 10 has an invalid length.
[  416.703709][T12684] team0: Port device netdevsim0 added
[  416.787640][T12684] team0: Port device netdevsim0 removed
[  417.091782][T12687] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1371'.
[  417.224187][  T143] usb 8-1: Using ep0 maxpacket: 8
[  417.228993][  T143] usb 8-1: config 7 has an invalid interface number: 207 but max is 0
[  417.231379][  T143] usb 8-1: config 7 has no interface number 0
[  417.233444][  T143] usb 8-1: too many endpoints for config 7 interface 207 altsetting 80: 184, using maximum allowed: 30
[  417.237718][  T143] usb 8-1: config 7 interface 207 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 184
[  417.241515][  T143] usb 8-1: config 7 interface 207 has no altsetting 0
[  417.246605][  T143] usb 8-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59
[  417.249384][  T143] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.252251][  T143] usb 8-1: Product: syz
[  417.253747][  T143] usb 8-1: Manufacturer: syz
[  417.255927][  T143] usb 8-1: SerialNumber: syz
[  417.564676][T12694] validate_nla: 3 callbacks suppressed
[  417.564688][T12694] netlink: 'syz.1.1373': attribute type 4 has an invalid length.
[  417.568504][T12694] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1373'.
[  417.617335][  T143] cypress_m8 8-1:7.207: HID->COM RS232 Adapter converter detected
[  417.636585][  T143] cyphidcom ttyUSB0: required endpoint is missing
[  417.645735][  T143] usb 8-1: USB disconnect, device number 6
[  417.663116][  T143] cypress_m8 8-1:7.207: device disconnected
[  417.664215][ T5304] Bluetooth: hci4: command 0xfc11 tx timeout
[  417.664364][ T5945] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  418.236483][T12710] netlink: 'syz.1.1377': attribute type 10 has an invalid length.
[  418.239552][T12710] team0: Port device netdevsim0 added
[  418.242313][T12710] netlink: 'syz.1.1377': attribute type 10 has an invalid length.
[  418.307846][T12710] team0: Port device netdevsim0 removed
[  418.474127][T12706] netlink: 'syz.2.1376': attribute type 9 has an invalid length.
[  418.552412][T12708] netlink: 'syz.0.1384': attribute type 4 has an invalid length.
[  418.554781][T12708] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1384'.
[  419.284224][   T63] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  419.583459][T12734] netlink: 'syz.2.1382': attribute type 10 has an invalid length.
[  419.617620][T12734] bond0: (slave netdevsim0): Releasing backup interface
[  419.620954][T12734] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  419.626047][T12734] team0: Port device netdevsim0 added
[  419.631562][T12734] netlink: 'syz.2.1382': attribute type 10 has an invalid length.
[  419.639855][T12734] team0: Port device netdevsim0 removed
[  419.648673][T12734] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  419.651635][T12734] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  420.165649][T12744] netlink: 'syz.3.1392': attribute type 10 has an invalid length.
[  420.231854][T12744] bond0: (slave netdevsim0): Releasing backup interface
[  420.234340][T12744] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  420.238530][T12744] team0: Port device netdevsim0 added
[  420.394229][T12742] netlink: 'syz.3.1392': attribute type 10 has an invalid length.
[  420.413590][T12742] team0: Port device netdevsim0 removed
[  420.416730][T12742] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  420.419480][T12742] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  421.020718][T12756] overlayfs: missing 'lowerdir'
[  421.027506][T12756] xt_limit: Overflow, try lower: 0/0
[  421.491850][T12770] qnx6: unable to read the first superblock
[  421.546706][T12766] netlink: 'syz.2.1388': attribute type 4 has an invalid length.
[  421.550410][T12766] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1388'.
[  422.646191][T12782] bond0: (slave netdevsim0): Releasing backup interface
[  422.648766][T12782] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  422.651834][T12782] team0: Port device netdevsim0 added
[  422.661774][T12784] team0: Port device netdevsim0 removed
[  422.665122][T12784] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  422.667476][T12784] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  422.680310][T12783] bond0: (slave netdevsim0): Releasing backup interface
[  422.683623][T12783] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  422.686722][T12783] team0: Port device netdevsim0 added
[  422.693413][T12786] team0: Port device netdevsim0 removed
[  422.697912][T12786] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  422.701311][T12786] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  423.333126][T12802] validate_nla: 4 callbacks suppressed
[  423.333165][T12802] netlink: 'syz.2.1397': attribute type 10 has an invalid length.
[  423.388268][T12803] netlink: 'syz.2.1397': attribute type 10 has an invalid length.
[  423.543719][T12802] bond0: (slave netdevsim0): Releasing backup interface
[  423.549814][T12802] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  423.553475][T12802] team0: Port device netdevsim0 added
[  423.560854][T12803] team0: Port device netdevsim0 removed
[  423.564878][T12803] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  423.567674][T12803] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  423.653998][T12804] overlayfs: missing 'lowerdir'
[  423.671549][T12804] xt_limit: Overflow, try lower: 0/0
[  424.555149][T12816] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  424.756374][T12822] mkiss: ax0: crc mode is auto.
[  424.762330][T12822] misc userio: Invalid payload size
[  424.764300][T12822] misc userio: No port type given on /dev/userio
[  424.936113][T12825] netlink: 'syz.1.1403': attribute type 10 has an invalid length.
[  424.939995][T12825] team0: Port device netdevsim0 added
[  424.944187][T12825] netlink: 'syz.1.1403': attribute type 10 has an invalid length.
[  424.985710][T12826] misc userio: The device must be registered before sending interrupts
[  425.101319][T12825] team0: Port device netdevsim0 removed
[  425.143209][T12828] 9p: Unknown Cache mode or invalid value fsca
[  425.324260][T12832] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜}�zR'
[  425.327474][T12832] CPU: 0 UID: 0 PID: 12832 Comm: syz.3.1405 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[  425.330510][T12832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  425.333524][T12832] Call Trace:
[  425.334491][T12832]  <TASK>
[  425.335369][T12832]  dump_stack_lvl+0x16c/0x1f0
[  425.336794][T12832]  sysfs_warn_dup+0x7f/0xa0
[  425.338192][T12832]  sysfs_do_create_link_sd+0x124/0x140
[  425.339885][T12832]  sysfs_create_link+0x61/0xc0
[  425.341347][T12832]  device_add+0x62e/0x1a70
[  425.342667][T12832]  ? __pfx_device_add+0x10/0x10
[  425.344096][T12832]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  425.345838][T12832]  ? ieee80211_set_bitrate_flags+0x249/0x6a0
[  425.347593][T12832]  wiphy_register+0x1c7a/0x2860
[  425.349013][T12832]  ? netdev_run_todo+0x837/0x12d0
[  425.350518][T12832]  ? __pfx_wiphy_register+0x10/0x10
[  425.352076][T12832]  ieee80211_register_hw+0x2951/0x3fa0
[  425.353681][T12832]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  425.355389][T12832]  ? net_generic+0xea/0x2a0
[  425.356717][T12832]  ? lockdep_init_map_type+0x16d/0x7d0
[  425.358304][T12832]  ? rcu_is_watching+0x12/0xc0
[  425.359723][T12832]  ? trace_hrtimer_init+0x1a6/0x230
[  425.361301][T12832]  ? __hrtimer_init+0x106/0x2c0
[  425.362758][T12832]  mac80211_hwsim_new_radio+0x2c47/0x56c0
[  425.364473][T12832]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  425.366242][T12832]  ? hwsim_new_radio_nl+0x9ff/0x12b0
[  425.367786][T12832]  hwsim_new_radio_nl+0xb42/0x12b0
[  425.369264][T12832]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  425.370856][T12832]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  425.372970][T12832]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  425.375084][T12832]  genl_family_rcv_msg_doit+0x202/0x2f0
[  425.376676][T12832]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  425.378432][T12832]  ? genl_get_cmd+0x195/0x580
[  425.379815][T12832]  ? bpf_lsm_capable+0x9/0x10
[  425.381183][T12832]  ? security_capable+0x7e/0x260
[  425.382613][T12832]  ? ns_capable+0xd7/0x110
[  425.383932][T12832]  genl_rcv_msg+0x565/0x800
[  425.385259][T12832]  ? __pfx_genl_rcv_msg+0x10/0x10
[  425.386714][T12832]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  425.388329][T12832]  ? __pfx___lock_acquire+0x10/0x10
[  425.389829][T12832]  netlink_rcv_skb+0x165/0x410
[  425.391235][T12832]  ? __pfx_genl_rcv_msg+0x10/0x10
[  425.392684][T12832]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  425.394219][T12832]  ? down_read+0xc9/0x330
[  425.395472][T12832]  ? __pfx_down_read+0x10/0x10
[  425.396861][T12832]  ? netlink_deliver_tap+0x1ae/0xca0
[  425.398389][T12832]  ? netlink_skb_set_owner_r+0xd3/0x200
[  425.400048][T12832]  genl_rcv+0x28/0x40
[  425.401212][T12832]  netlink_unicast+0x53c/0x7f0
[  425.402601][T12832]  ? __pfx_netlink_unicast+0x10/0x10
[  425.404132][T12832]  netlink_sendmsg+0x8b8/0xd70
[  425.405516][T12832]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.407050][T12832]  ____sys_sendmsg+0x9ae/0xb40
[  425.408404][T12832]  ? __pfx_____sys_sendmsg+0x10/0x10
[  425.409886][T12832]  ? get_compat_msghdr+0x11b/0x170
[  425.411316][T12832]  ___sys_sendmsg+0x135/0x1e0
[  425.412638][T12832]  ? __pfx____sys_sendmsg+0x10/0x10
[  425.414098][T12832]  ? __pfx_lock_release+0x10/0x10
[  425.415539][T12832]  ? trace_lock_acquire+0x14e/0x1f0
[  425.416994][T12832]  ? __fget_files+0x206/0x3a0
[  425.418326][T12832]  __sys_sendmsg+0x16e/0x220
[  425.420008][T12832]  ? __pfx___sys_sendmsg+0x10/0x10
[  425.421817][T12832]  ? __pfx___schedule+0x10/0x10
[  425.423304][T12832]  __do_fast_syscall_32+0x73/0x120
[  425.425331][T12832]  do_fast_syscall_32+0x32/0x80
[  425.427158][T12832]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  425.429006][T12832] RIP: 0023:0xf7f55579
[  425.430587][T12832] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  425.437409][T12832] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  425.440308][T12832] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000040
[  425.443112][T12832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  425.445482][T12832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  425.447761][T12832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  425.450002][T12832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  425.452213][T12832]  </TASK>
[  425.453319][    C0] vkms_vblank_simulate: vblank timer overrun
[  425.621696][T12838] netlink: 'syz.2.1406': attribute type 10 has an invalid length.
[  425.626077][T12838] bond0: (slave netdevsim0): Releasing backup interface
[  425.628530][T12838] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  425.631485][T12838] team0: Port device netdevsim0 added
[  425.635474][T12838] netlink: 'syz.2.1406': attribute type 10 has an invalid length.
[  425.639721][T12838] team0: Port device netdevsim0 removed
[  425.642617][T12838] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  425.645011][T12838] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  426.753787][T12851] netlink: 'syz.2.1409': attribute type 10 has an invalid length.
[  426.810567][T12852] netlink: 'syz.2.1409': attribute type 10 has an invalid length.
[  427.089293][T12851] bond0: (slave netdevsim0): Releasing backup interface
[  427.124510][T12851] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  427.127554][T12851] team0: Port device netdevsim0 added
[  427.131707][T12852] team0: Port device netdevsim0 removed
[  427.134801][T12852] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  427.137284][T12852] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  427.198529][T12857] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.1411'.
[  427.201809][T12857] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  427.441716][T12860] program syz.0.1410 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  427.444719][T12860] ata1.00: invalid transfer count 0
[  427.526799][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'.
[  427.643318][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'.
[  428.192266][T12879] netlink: 'syz.1.1415': attribute type 10 has an invalid length.
[  428.197631][T12879] team0: Port device netdevsim0 added
[  428.201662][T12879] netlink: 'syz.1.1415': attribute type 10 has an invalid length.
[  428.220302][T12879] team0: Port device netdevsim0 removed
[  428.360580][T12881] netlink: 'syz.3.1417': attribute type 10 has an invalid length.
[  428.409394][T12883] netlink: 'syz.3.1417': attribute type 10 has an invalid length.
[  428.492920][T12881] bond0: (slave netdevsim0): Releasing backup interface
[  428.498264][T12881] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  428.506047][T12881] team0: Port device netdevsim0 added
[  428.510278][T12883] team0: Port device netdevsim0 removed
[  428.513394][T12883] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  428.518362][T12883] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  428.952668][T12890] lo speed is unknown, defaulting to 1000
[  429.017326][T12899] Bluetooth: MGMT ver 1.23
[  429.022362][T12896] input: syz1 as /devices/virtual/input/input23
[  429.311038][T12908] netlink: 'syz.0.1428': attribute type 10 has an invalid length.
[  429.318269][T12908] bond0: (slave netdevsim0): Releasing backup interface
[  429.322380][T12908] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  429.326943][T12908] team0: Port device netdevsim0 added
[  429.330701][T12908] netlink: 'syz.0.1428': attribute type 10 has an invalid length.
[  429.335127][T12908] team0: Port device netdevsim0 removed
[  429.338083][T12908] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  429.340384][T12908] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  429.698577][T12912] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.793846][T12912] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.955047][T12912] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.061015][T12919] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  430.156645][T12912] bond0: (slave netdevsim0): Releasing backup interface
[  430.159431][T12912] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode
[  430.162604][T12912] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.240234][T12926] netlink: 'syz.0.1425': attribute type 10 has an invalid length.
[  430.248640][T12926] bond0: (slave netdevsim0): Releasing backup interface
[  430.251453][T12926] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  430.258156][T12926] team0: Port device netdevsim0 added
[  430.263804][T12926] netlink: 'syz.0.1425': attribute type 10 has an invalid length.
[  430.282816][T12926] team0: Port device netdevsim0 removed
[  430.290354][T12926] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  430.293182][T12926] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  430.440468][T12912] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.450931][T12912] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.459603][T12912] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.538669][T12912] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.769049][T12932] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  430.936738][T12932] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  430.941088][T12932] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  430.956120][T12932] bond0 (unregistering): Released all slaves
[  431.241735][T12946] netlink: 'syz.0.1437': attribute type 10 has an invalid length.
[  431.292622][T12948] netlink: 'syz.0.1437': attribute type 10 has an invalid length.
[  431.304007][T12947] netlink: 'syz.2.1438': attribute type 10 has an invalid length.
[  431.355462][T12950] netlink: 'syz.2.1438': attribute type 10 has an invalid length.
[  431.540860][   T39] audit: type=1326 audit(1736230373.580:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  431.549583][   T39] audit: type=1326 audit(1736230373.590:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  431.559680][T12946] bond0: (slave netdevsim0): Releasing backup interface
[  431.562594][T12946] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  431.565979][T12946] team0: Port device netdevsim0 added
[  431.571494][   T39] audit: type=1326 audit(1736230373.590:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  431.573346][T12948] team0: Port device netdevsim0 removed
[  431.581508][T12948] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  431.583070][   T39] audit: type=1326 audit(1736230373.590:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  431.583810][T12948] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  431.595872][   T39] audit: type=1326 audit(1736230373.590:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  431.601937][   T39] audit: type=1326 audit(1736230373.590:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  431.608110][   T39] audit: type=1326 audit(1736230373.590:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  431.614172][   T39] audit: type=1326 audit(1736230373.590:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  431.620333][   T39] audit: type=1326 audit(1736230373.590:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  431.626546][   T39] audit: type=1326 audit(1736230373.590:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.1430" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f55579 code=0x7ffc0000
[  432.674213][T12211] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  432.742111][T12974] team0: Port device netdevsim0 added
[  432.761192][T12974] team0: Port device netdevsim0 removed
[  432.769285][T12972] 9p: Unknown Cache mode or invalid value fscach
[  432.904188][T12211] usb 7-1: Using ep0 maxpacket: 16
[  432.911852][T12211] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  432.918552][T12211] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  432.922095][T12211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.926923][T12211] usb 7-1: Product: syz
[  432.928593][T12211] usb 7-1: Manufacturer: syz
[  432.930426][T12211] usb 7-1: SerialNumber: syz
[  432.933705][T12211] usb 7-1: config 0 descriptor??
[  432.939802][T12211] hub 7-1:0.0: bad descriptor, ignoring hub
[  432.941852][T12211] hub 7-1:0.0: probe with driver hub failed with error -5
[  432.948847][T12211] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input24
[  433.507028][ T5978] usb 7-1: USB disconnect, device number 6
[  433.597532][T12987] validate_nla: 2 callbacks suppressed
[  433.597583][T12987] netlink: 'syz.1.1439': attribute type 10 has an invalid length.
[  433.603995][T12987] team0: Port device netdevsim0 added
[  433.608122][T12987] netlink: 'syz.1.1439': attribute type 10 has an invalid length.
[  433.656642][T12987] team0: Port device netdevsim0 removed
[  434.410258][T12994] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  435.268744][T13002] netlink: 'syz.3.1442': attribute type 10 has an invalid length.
[  435.274922][T13002] team0: Port device netdevsim0 added
[  435.280868][T13002] netlink: 'syz.3.1442': attribute type 10 has an invalid length.
[  435.287954][T13002] team0: Port device netdevsim0 removed
[  435.469563][T13004] netlink: 'syz.1.1443': attribute type 1 has an invalid length.
[  435.475298][T13004] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1443'.
[  436.160146][T13015] netlink: 'syz.3.1445': attribute type 10 has an invalid length.
[  436.166137][T13015] team0: Port device netdevsim0 added
[  436.172125][T13015] netlink: 'syz.3.1445': attribute type 10 has an invalid length.
[  436.180419][T13015] team0: Port device netdevsim0 removed
[  436.916871][   T35] libceph: connect (1)[c::]:6789 error -13
[  436.918863][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  436.954714][T13019] ceph: No mds server is up or the cluster is laggy
[  437.005289][  T143] libceph: connect (1)[c::]:6789 error -13
[  437.007558][  T143] libceph: mon0 (1)[c::]:6789 connect error
[  437.181215][T13033] fuse: Bad value for 'fd'
[  437.264541][  T143] libceph: connect (1)[c::]:6789 error -13
[  437.267454][  T143] libceph: mon0 (1)[c::]:6789 connect error
[  437.404228][T13033] nbd3: detected capacity change from 0 to 22
[  437.410845][T13036] block nbd3: shutting down sockets
[  437.424769][T11680] blk_print_req_error: 24 callbacks suppressed
[  437.424784][T11680] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  437.430337][T11680] buffer_io_error: 23 callbacks suppressed
[  437.430345][T11680] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.435140][   T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  437.438223][   T10] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.442072][T11680] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  437.453572][T11680] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.456051][T11680] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  437.459229][T11680] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.461511][T11680] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  437.464699][T11680] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.467237][T11680] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  437.469886][T11680] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.472076][T11680] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  437.475915][T11680] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.479029][T11680] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  437.482513][T11680] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.486003][T11680] ldm_validate_partition_table(): Disk read failed.
[  437.488103][T11680] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  437.491547][T11680] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.495119][T11680] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  437.498232][T11680] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.500569][T11680] Dev nbd3: unable to read RDB block 0
[  437.502235][T11680]  nbd3: unable to read partition table
[  437.504557][T11680] nbd3: partition table beyond EOD, truncated
[  437.507191][T13039] ldm_validate_partition_table(): Disk read failed.
[  437.509360][T13039] Dev nbd3: unable to read RDB block 0
[  437.511223][T13039]  nbd3: unable to read partition table
[  437.512963][T13039] nbd3: partition table beyond EOD, truncated
[  437.524721][T11680] ldm_validate_partition_table(): Disk read failed.
[  437.526782][T11680] Dev nbd3: unable to read RDB block 0
[  437.528466][T11680]  nbd3: unable to read partition table
[  437.530103][T11680] nbd3: partition table beyond EOD, truncated
[  437.694907][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'.
[  437.733687][T13025] ceph: No mds server is up or the cluster is laggy
[  438.750086][T13062] trusted_key: syz.3.1456 sent an empty control message without MSG_MORE.
[  439.402692][T13076] can0: slcan on ttyS3.
[  439.435805][ T1412] ieee802154 phy1 wpan1: encryption failed: -22
[  440.044597][T13067] can0 (unregistered): slcan off ttyS3.
[  440.227564][T13105] netlink: 'syz.3.1461': attribute type 10 has an invalid length.
[  440.236072][T13105] team0: Port device netdevsim0 added
[  440.243060][T13105] netlink: 'syz.3.1461': attribute type 10 has an invalid length.
[  440.353677][T13108] netlink: 'syz.2.1462': attribute type 10 has an invalid length.
[  440.390131][T13110] netlink: 'syz.2.1462': attribute type 10 has an invalid length.
[  440.475360][T13105] team0: Port device netdevsim0 removed
[  440.709460][T13117] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0
[  441.118032][T13132] lo speed is unknown, defaulting to 1000
[  442.194700][T13148] netlink: 'syz.3.1469': attribute type 10 has an invalid length.
[  442.198892][T13148] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  442.202817][T13148] team0: Port device netdevsim0 added
[  442.207314][T13148] netlink: 'syz.3.1469': attribute type 10 has an invalid length.
[  442.222029][T13148] team0: Port device netdevsim0 removed
[  442.595918][T13150] binder: 13145:13150 ioctl ae01 0 returned -22
[  442.985171][T13156] netlink: 'syz.2.1471': attribute type 10 has an invalid length.
[  442.989329][T13156] netlink: 'syz.2.1471': attribute type 10 has an invalid length.
[  444.200662][T13171] lo speed is unknown, defaulting to 1000
[  444.405244][T13175] netlink: 'syz.0.1475': attribute type 10 has an invalid length.
[  444.461879][T13176] netlink: 'syz.0.1475': attribute type 10 has an invalid length.
[  444.647232][T13175] bond0: (slave netdevsim0): Releasing backup interface
[  444.650148][T13175] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  444.654486][T13175] team0: Port device netdevsim0 added
[  444.659168][T13176] team0: Port device netdevsim0 removed
[  444.663526][T13176] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  444.666800][T13176] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  444.917828][T13183] lo speed is unknown, defaulting to 1000
[  445.433118][T13192] overlayfs: failed to resolve './file1': -2
[  445.436094][T13188] lo speed is unknown, defaulting to 1000
[  446.393474][T13204] netlink: 'syz.2.1481': attribute type 9 has an invalid length.
[  447.076290][T13215] netlink: 'syz.3.1482': attribute type 10 has an invalid length.
[  447.080063][T13215] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  447.083915][T13215] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  447.086419][T13215] team0: Port device netdevsim0 added
[  447.090536][T13215] netlink: 'syz.3.1482': attribute type 10 has an invalid length.
[  447.320055][T13215] team0: Port device netdevsim0 removed
[  447.325432][T13219] infiniband syz0: set active
[  447.353808][T13219] batman_adv: batadv0: Interface deactivated: geneve2
[  447.356484][T13219] batman_adv: batadv0: Removing interface: geneve2
[  447.359912][T13219] batman_adv: batadv0: Removing interface: gretap1
[  447.373668][   T35] lo speed is unknown, defaulting to 1000
[  448.053044][T13234] netlink: 'syz.3.1486': attribute type 10 has an invalid length.
[  448.057251][T13234] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  448.063337][T13234] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  448.066063][T13234] team0: Port device netdevsim0 added
[  448.070671][T13234] netlink: 'syz.3.1486': attribute type 10 has an invalid length.
[  448.079763][T13234] team0: Port device netdevsim0 removed
[  448.667239][T13242] netlink: 'syz.0.1488': attribute type 4 has an invalid length.
[  448.670675][T13242] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1488'.
[  449.347969][T13254] Illegal XDP return value 424069050 on prog  (id 243) dev syz_tun, expect packet loss!
[  449.919538][   T35] hid-generic 0000:0000:0000.0006: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  449.997236][T13255] overlayfs: missing 'lowerdir'
[  450.005904][T13255] xt_limit: Overflow, try lower: 0/0
[  450.529545][T13272] netlink: 'syz.1.1495': attribute type 10 has an invalid length.
[  450.533087][T13272] team0: Port device netdevsim0 added
[  450.536477][T13272] netlink: 'syz.1.1495': attribute type 10 has an invalid length.
[  450.587611][T13272] team0: Port device netdevsim0 removed
[  450.867069][   T39] kauditd_printk_skb: 706 callbacks suppressed
[  450.867111][   T39] audit: type=1800 audit(1736230392.910:1063): pid=13284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1496" name="bus" dev="overlay" ino=2108 res=0 errno=0
[  452.165668][T13305] netlink: 'syz.3.1501': attribute type 10 has an invalid length.
[  452.168327][T13305] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  452.171394][T13305] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  452.173960][T13305] team0: Port device netdevsim0 added
[  452.184850][T13305] netlink: 'syz.3.1501': attribute type 10 has an invalid length.
[  452.191010][T13305] team0: Port device netdevsim0 removed
[  452.226556][T13306] program syz.2.1502 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  453.351517][T13325] netlink: 'syz.1.1507': attribute type 10 has an invalid length.
[  453.355815][T13325] team0: Port device netdevsim0 added
[  453.359996][T13325] netlink: 'syz.1.1507': attribute type 10 has an invalid length.
[  453.365467][T13325] team0: Port device netdevsim0 removed
[  454.989482][T13348] overlayfs: missing 'lowerdir'
[  455.473649][T13354] netlink: 'syz.1.1513': attribute type 10 has an invalid length.
[  455.478584][T13354] team0: Port device netdevsim0 added
[  455.482415][T13354] netlink: 'syz.1.1513': attribute type 10 has an invalid length.
[  455.488895][T13354] team0: Port device netdevsim0 removed
[  455.900353][T13362] netlink: 'syz.3.1515': attribute type 10 has an invalid length.
[  455.903125][T13362] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  455.907864][T13362] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  455.910612][T13362] team0: Port device netdevsim0 added
[  455.914743][T13362] netlink: 'syz.3.1515': attribute type 10 has an invalid length.
[  455.922321][T13362] team0: Port device netdevsim0 removed
[  456.233405][T13364] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1514'.
[  456.351607][T13366] netfs: Couldn't get user pages (rc=-14)
[  456.640916][T13373] overlayfs: missing 'lowerdir'
[  456.656323][T13373] xt_limit: Overflow, try lower: 0/0
[  456.841241][T13375] netlink: 'syz.0.1518': attribute type 10 has an invalid length.
[  456.870947][T13374] netlink: 'syz.0.1518': attribute type 10 has an invalid length.
[  457.396892][T13394] netlink: 'syz.1.1522': attribute type 10 has an invalid length.
[  457.399656][T13394] team0: Port device netdevsim0 added
[  457.402523][T13394] netlink: 'syz.1.1522': attribute type 10 has an invalid length.
[  457.460940][T13395] overlayfs: missing 'lowerdir'
[  457.485580][T13394] team0: Port device netdevsim0 removed
[  458.106636][T13406] netfs: Couldn't get user pages (rc=-14)
[  458.126450][T13409] netlink: 'syz.2.1525': attribute type 10 has an invalid length.
[  458.131198][T13409] netlink: 'syz.2.1525': attribute type 10 has an invalid length.
[  458.300487][T13411] netlink: 'syz.3.1527': attribute type 10 has an invalid length.
[  458.307290][T13411] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  458.347205][T13412] netlink: 'syz.3.1527': attribute type 10 has an invalid length.
[  458.452338][T13411] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  458.455600][T13411] team0: Port device netdevsim0 added
[  458.488722][T13412] team0: Port device netdevsim0 removed
[  458.745776][T13419] netlink: 'syz.1.1528': attribute type 10 has an invalid length.
[  458.753079][T13419] team0: Port device netdevsim0 added
[  458.758809][T13419] netlink: 'syz.1.1528': attribute type 10 has an invalid length.
[  459.100500][T13419] team0: Port device netdevsim0 removed
[  459.410320][T13428] overlayfs: missing 'lowerdir'
[  459.426141][T13428] xt_limit: Overflow, try lower: 0/0
[  460.166399][T13437] netlink: 'syz.2.1533': attribute type 4 has an invalid length.
[  460.460032][T13445] netlink: 'syz.0.1532': attribute type 10 has an invalid length.
[  460.464357][T13445] bond0: (slave netdevsim0): Releasing backup interface
[  460.467156][T13445] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  460.474439][T13445] team0: Port device netdevsim0 added
[  460.483970][T13445] team0: Port device netdevsim0 removed
[  460.491520][T13445] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  460.494667][T13445] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  460.860350][T13450] 9p: Unknown Cache mode or invalid value fsca
[  461.210534][T13459] team0: Port device netdevsim0 added
[  461.334477][T13461] team0: Port device netdevsim0 removed
[  461.431884][    C2] hrtimer: interrupt took 22306 ns
[  461.439585][T13462] bond0: (slave netdevsim0): Releasing backup interface
[  461.444474][T13462] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  461.452693][T13462] team0: Port device netdevsim0 added
[  461.460488][T13463] team0: Port device netdevsim0 removed
[  461.465284][T13463] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  461.468367][T13463] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  461.692948][T13471] hfs: unable to load iocharset "io#harset"
[  461.699098][T13471] fuse: Unknown parameter 'grou00000000000000000000'
[  462.146193][T13482] team0: Port device netdevsim0 added
[  462.177880][T13482] team0: Port device netdevsim0 removed
[  462.889538][T13493] overlayfs: missing 'lowerdir'
[  462.894679][T13493] xt_limit: Overflow, try lower: 0/0
[  463.163429][T13504] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  463.796199][T13507] 9p: Unknown Cache mode or invalid value fsca
[  463.939688][T13513] validate_nla: 9 callbacks suppressed
[  463.939727][T13513] netlink: 'syz.1.1549': attribute type 10 has an invalid length.
[  463.946121][T13513] team0: Port device netdevsim0 added
[  463.950454][T13513] netlink: 'syz.1.1549': attribute type 10 has an invalid length.
[  463.965082][T13513] team0: Port device netdevsim0 removed
[  464.137534][T13515] netlink: 'syz.3.1550': attribute type 10 has an invalid length.
[  464.140252][T13515] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  464.143386][T13515] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  464.146064][T13515] team0: Port device netdevsim0 added
[  464.150335][T13515] netlink: 'syz.3.1550': attribute type 10 has an invalid length.
[  464.164981][T13515] team0: Port device netdevsim0 removed
[  464.745145][   T39] audit: type=1326 audit(1736230406.790:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  464.755142][   T39] audit: type=1326 audit(1736230406.790:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  464.762960][   T39] audit: type=1326 audit(1736230406.800:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1552" exe="/syz-executor" sig=0 arch=40000003 syscall=70 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  464.769955][   T39] audit: type=1326 audit(1736230406.800:1067): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  464.779168][   T39] audit: type=1326 audit(1736230406.800:1068): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  464.788030][   T39] audit: type=1326 audit(1736230406.800:1069): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1552" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  464.874204][    C0] vkms_vblank_simulate: vblank timer overrun
[  464.925130][    C0] vkms_vblank_simulate: vblank timer overrun
[  465.004192][    C0] vkms_vblank_simulate: vblank timer overrun
[  465.154151][    C0] vkms_vblank_simulate: vblank timer overrun
[  465.234180][    C0] vkms_vblank_simulate: vblank timer overrun
[  465.304168][    C0] vkms_vblank_simulate: vblank timer overrun
[  465.368172][    C0] vkms_vblank_simulate: vblank timer overrun
[  465.410892][    C0] vkms_vblank_simulate: vblank timer overrun
[  465.444181][    C0] vkms_vblank_simulate: vblank timer overrun
[  465.617056][   T39] audit: type=1326 audit(1736230407.660:1070): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  465.626624][   T39] audit: type=1326 audit(1736230407.660:1071): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[  465.677788][T13527] warn_alloc: 1 callbacks suppressed
[  465.677798][T13527] syz.0.1553: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  465.683619][T13527] CPU: 0 UID: 0 PID: 13527 Comm: syz.0.1553 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[  465.686664][T13527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  465.689702][T13527] Call Trace:
[  465.690679][T13527]  <TASK>
[  465.691538][T13527]  dump_stack_lvl+0x16c/0x1f0
[  465.692898][T13527]  warn_alloc+0x24d/0x3a0
[  465.694144][T13527]  ? __pfx_warn_alloc+0x10/0x10
[  465.695551][T13527]  ? __pfx_stack_trace_save+0x10/0x10
[  465.697106][T13527]  ? kasan_save_stack+0x42/0x60
[  465.698506][T13527]  ? kasan_save_stack+0x33/0x60
[  465.699948][T13527]  ? kasan_save_track+0x14/0x30
[  465.701455][T13527]  ? __kasan_kmalloc+0xaa/0xb0
[  465.702847][T13527]  ? xskq_create+0x52/0x1d0
[  465.704175][T13527]  ? do_sock_setsockopt+0x222/0x480
[  465.705664][T13527]  ? __sys_setsockopt+0x1a0/0x230
[  465.707117][T13527]  ? __ia32_sys_setsockopt+0xbc/0x160
[  465.708652][T13527]  __vmalloc_node_range_noprof+0x10df/0x1530
[  465.710384][T13527]  ? xskq_create+0xfb/0x1d0
[  465.711735][T13527]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  465.713539][T13527]  ? xskq_create+0xfb/0x1d0
[  465.714854][T13527]  vmalloc_user_noprof+0x6b/0x90
[  465.716276][T13527]  ? xskq_create+0xfb/0x1d0
[  465.717602][T13527]  xskq_create+0xfb/0x1d0
[  465.718862][T13527]  xsk_setsockopt+0x8b0/0xac0
[  465.720241][T13527]  ? __pfx_xsk_setsockopt+0x10/0x10
[  465.721735][T13527]  ? find_held_lock+0x2d/0x110
[  465.723149][T13527]  ? __pfx_xsk_setsockopt+0x10/0x10
[  465.724651][T13527]  do_sock_setsockopt+0x222/0x480
[  465.726279][T13527]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  465.727882][T13527]  ? lock_acquire+0x2f/0xb0
[  465.729191][T13527]  __sys_setsockopt+0x1a0/0x230
[  465.730611][T13527]  __ia32_sys_setsockopt+0xbc/0x160
[  465.732095][T13527]  ? lockdep_hardirqs_on+0x7c/0x110
[  465.733581][T13527]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  465.735454][T13527]  __do_fast_syscall_32+0x73/0x120
[  465.736924][T13527]  do_fast_syscall_32+0x32/0x80
[  465.738327][T13527]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  465.740149][T13527] RIP: 0023:0xf7fd3579
[  465.741319][T13527] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  465.746772][T13527] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[  465.749132][T13527] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b
[  465.751397][T13527] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000020
[  465.753648][T13527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  465.755922][T13527] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  465.758081][T13527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  465.760343][T13527]  </TASK>
[  465.761338][    C0] vkms_vblank_simulate: vblank timer overrun
[  465.764172][T13527] Mem-Info:
[  465.765163][T13527] active_anon:21334 inactive_anon:2835 isolated_anon:0
[  465.765163][T13527]  active_file:5544 inactive_file:11248 isolated_file:0
[  465.765163][T13527]  unevictable:1768 dirty:511 writeback:0
[  465.765163][T13527]  slab_reclaimable:6010 slab_unreclaimable:72732
[  465.765163][T13527]  mapped:24892 shmem:20414 pagetables:802
[  465.765163][T13527]  sec_pagetables:314 bounce:0
[  465.765163][T13527]  kernel_misc_reclaimable:0
[  465.765163][T13527]  free:39870 free_pcp:4668 free_cma:0
[  465.781094][T13527] Node 0 active_anon:6956kB inactive_anon:316kB active_file:1212kB inactive_file:7296kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4528kB dirty:40kB writeback:0kB shmem:4628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:9620kB pagetables:900kB sec_pagetables:1152kB all_unreclaimable? yes
[  465.790882][T13527] Node 1 active_anon:81880kB inactive_anon:11024kB active_file:20964kB inactive_file:37696kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98540kB dirty:2004kB writeback:0kB shmem:80528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2272kB pagetables:2308kB sec_pagetables:104kB all_unreclaimable? no
[  465.800304][T13527] Node 0 DMA free:2972kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:324kB inactive_anon:52kB active_file:0kB inactive_file:180kB unevictable:0kB writepending:20kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:580kB local_pcp:16kB free_cma:0kB
[  465.809261][T13527] lowmem_reserve[]: 0 273 0 0 0
[  465.811491][T13527] Node 0 DMA32 free:16512kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:6632kB inactive_anon:264kB active_file:1212kB inactive_file:7116kB unevictable:3536kB writepending:20kB present:1032196kB managed:306308kB mlocked:0kB bounce:0kB free_pcp:4280kB local_pcp:2004kB free_cma:0kB
[  465.820682][T13527] lowmem_reserve[]: 0 0 0 0 0
[  465.822383][T13527] Node 1 DMA32 free:123840kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB active_anon:86480kB inactive_anon:11024kB active_file:20964kB inactive_file:37696kB unevictable:3536kB writepending:2004kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:21968kB local_pcp:764kB free_cma:0kB
[  465.832171][T13527] lowmem_reserve[]: 0 0 0 0 0
[  465.833870][T13527] Node 0 DMA: 57*4kB (UM) 55*8kB (U) 38*16kB (U) 35*32kB (UM) 7*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2972kB
[  465.838376][T13527] Node 0 DMA32: 368*4kB (UMEH) 104*8kB (UMEH) 22*16kB (UEH) 107*32kB (UMEH) 43*64kB (UMEH) 16*128kB (UME) 6*256kB (UE) 4*512kB (UME) 0*1024kB 1*2048kB (M) 0*4096kB = 16512kB
[  465.843747][T13527] Node 1 DMA32: 215*4kB (UMEH) 347*8kB (UEH) 141*16kB (UMEH) 62*32kB (UEH) 126*64kB (UMEH) 66*128kB (UMEH) 74*256kB (UMEH) 47*512kB (UM) 37*1024kB (UM) 9*2048kB (UM) 0*4096kB = 123716kB
[  465.851715][T13527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  465.854888][T13527] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  465.858060][T13527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  465.860873][T13527] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  465.863677][T13527] 39981 total pagecache pages
[  465.866611][T13527] 0 pages in swap cache
[  465.867821][T13527] Free swap  = 124272kB
[  465.869010][T13527] Total swap = 124996kB
[  465.870220][T13527] 524155 pages RAM
[  465.874428][T13527] 0 pages HighMem/MovableOnly
[  465.875904][T13527] 206675 pages reserved
[  465.877146][T13527] 0 pages cma reserved
[  465.961335][T13537] netlink: 'syz.3.1554': attribute type 10 has an invalid length.
[  465.964201][T13537] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  465.967630][T13537] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  465.970341][T13537] team0: Port device netdevsim0 added
[  465.975078][T13537] netlink: 'syz.3.1554': attribute type 10 has an invalid length.
[  466.032973][T13537] team0: Port device netdevsim0 removed
[  466.514477][T13546] netlink: 'syz.2.1556': attribute type 10 has an invalid length.
[  466.518901][T13546] netlink: 'syz.2.1556': attribute type 10 has an invalid length.
[  466.842397][T13547] overlayfs: missing 'lowerdir'
[  466.853449][T13547] xt_limit: Overflow, try lower: 0/0
[  467.217815][T13556] serio: Serial port ptm0
[  467.345737][T13557] netlink: 'syz.2.1560': attribute type 10 has an invalid length.
[  467.407974][T13557] bridge0: entered promiscuous mode
[  467.409746][T13557] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  468.293443][T13573] netlink: 'syz.2.1563': attribute type 10 has an invalid length.
[  469.112377][T13589] validate_nla: 1 callbacks suppressed
[  469.112415][T13589] netlink: 'syz.3.1566': attribute type 10 has an invalid length.
[  469.117015][T13589] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  469.120260][T13589] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  469.122801][T13589] team0: Port device netdevsim0 added
[  469.126800][T13589] netlink: 'syz.3.1566': attribute type 10 has an invalid length.
[  469.159395][T13589] team0: Port device netdevsim0 removed
[  469.496630][T13591] netlink: 'syz.2.1568': attribute type 10 has an invalid length.
[  469.500016][T13591] netlink: 'syz.2.1568': attribute type 10 has an invalid length.
[  471.044560][T13610] netlink: 'syz.1.1572': attribute type 10 has an invalid length.
[  471.049317][T13610] team0: Port device netdevsim0 added
[  471.053985][T13610] netlink: 'syz.1.1572': attribute type 10 has an invalid length.
[  471.063043][T13610] team0: Port device netdevsim0 removed
[  472.154267][ T5883] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  472.256738][T13625] netlink: 'syz.2.1576': attribute type 10 has an invalid length.
[  472.260189][T13625] netlink: 'syz.2.1576': attribute type 10 has an invalid length.
[  472.545442][ T5883] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  472.548578][ T5883] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  472.551378][ T5883] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  472.553933][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.559175][T13617] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  472.566285][ T5883] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  472.765543][ T5883] usb 6-1: USB disconnect, device number 4
[  473.408125][T13646] netlink: 'syz.2.1579': attribute type 10 has an invalid length.
[  473.425969][T13646] netlink: 'syz.2.1579': attribute type 10 has an invalid length.
[  474.662082][T13662] program syz.2.1583 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  474.667174][T13662] ata1.00: invalid transfer count 0
[  475.792787][T13675] usb usb8: check_ctrlrecip: process 13675 (syz.1.1588) requesting ep 01 but needs 81
[  475.796548][T13675] usb usb8: usbfs: process 13675 (syz.1.1588) did not claim interface 0 before use
[  477.028698][T13712] lo speed is unknown, defaulting to 1000
[  478.283548][T13725] lo speed is unknown, defaulting to 1000
[  479.170783][T13735] lo speed is unknown, defaulting to 1000
[  480.108192][T13761] 
[  480.108927][T13761] ======================================================
[  480.110920][T13761] WARNING: possible circular locking dependency detected
[  480.112900][T13761] 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 Not tainted
[  480.117404][T13761] ------------------------------------------------------
[  480.119640][T13761] syz.0.1601/13761 is trying to acquire lock:
[  480.121369][T13761] ffff888043bc5418 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x132/0x4f0
[  480.124031][T13761] 
[  480.124031][T13761] but task is already holding lock:
[  480.126109][T13761] ffff888043bc54a8 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0
[  480.128823][T13761] 
[  480.128823][T13761] which lock already depends on the new lock.
[  480.128823][T13761] 
[  480.131755][T13761] 
[  480.131755][T13761] the existing dependency chain (in reverse order) is:
[  480.134277][T13761] 
[  480.134277][T13761] -> #5 (&q->sysfs_dir_lock){+.+.}-{4:4}:
[  480.136523][T13761]        __mutex_lock+0x19b/0xa60
[  480.137976][T13761]        blk_mq_sysfs_unregister_hctxs+0x92/0x2d0
[  480.139818][T13761]        __blk_mq_update_nr_hw_queues+0x93f/0x1460
[  480.141669][T13761]        blk_mq_update_nr_hw_queues+0x2a/0x40
[  480.143413][T13761]        nbd_start_device+0x15b/0xd70
[  480.145018][T13761]        nbd_ioctl+0x21a/0xfd0
[  480.146407][T13761]        compat_blkdev_ioctl+0x2f7/0x750
[  480.148020][T13761]        __do_compat_sys_ioctl+0x1cb/0x2c0
[  480.149686][T13761]        __do_fast_syscall_32+0x73/0x120
[  480.151334][T13761]        do_fast_syscall_32+0x32/0x80
[  480.152858][T13761]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  480.154796][T13761] 
[  480.154796][T13761] -> #4 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  480.157243][T13761]        blk_mq_submit_bio+0x1fb6/0x24c0
[  480.158860][T13761]        __submit_bio+0x384/0x540
[  480.160321][T13761]        submit_bio_noacct_nocheck+0x698/0xd70
[  480.162139][T13761]        submit_bio_noacct+0x93a/0x1e20
[  480.163736][T13761]        mpage_readahead+0x41d/0x590
[  480.165251][T13761]        read_pages+0x1a8/0xdc0
[  480.166663][T13761]        page_cache_ra_unbounded+0x3dc/0x750
[  480.168381][T13761]        force_page_cache_ra+0x24b/0x340
[  480.169980][T13761]        page_cache_sync_ra+0x110/0x9c0
[  480.171534][T13761]        filemap_get_pages+0xd7b/0x1be0
[  480.173015][T13761]        filemap_read+0x3ca/0xd70
[  480.174414][T13761]        blkdev_read_iter+0x187/0x480
[  480.175872][T13761]        vfs_read+0x87f/0xbe0
[  480.177234][T13761]        ksys_read+0x12b/0x250
[  480.178612][T13761]        do_syscall_64+0xcd/0x250
[  480.180087][T13761]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.181949][T13761] 
[  480.181949][T13761] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}:
[  480.184462][T13761]        down_read+0x9a/0x330
[  480.186220][T13761]        filemap_fault+0x2e0/0x2820
[  480.188063][T13761]        __do_fault+0x10a/0x490
[  480.189464][T13761]        do_pte_missing+0xebd/0x3e00
[  480.191036][T13761]        __handle_mm_fault+0x103c/0x2a40
[  480.192656][T13761]        handle_mm_fault+0x3fa/0xaa0
[  480.194158][T13761]        do_user_addr_fault+0x7a3/0x13f0
[  480.195768][T13761]        exc_page_fault+0x5c/0xc0
[  480.197212][T13761]        asm_exc_page_fault+0x26/0x30
[  480.198747][T13761]        _copy_from_user+0x95/0xd0
[  480.200247][T13761]        snd_rawmidi_kernel_write1+0x35e/0x860
[  480.201983][T13761]        snd_rawmidi_write+0x267/0xbe0
[  480.203545][T13761]        vfs_write+0x24c/0x1150
[  480.204937][T13761]        ksys_write+0x207/0x250
[  480.206337][T13761]        __do_fast_syscall_32+0x73/0x120
[  480.207947][T13761]        do_fast_syscall_32+0x32/0x80
[  480.209476][T13761]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  480.211428][T13761] 
[  480.211428][T13761] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[  480.213576][T13761]        __might_fault+0x11b/0x190
[  480.215065][T13761]        _copy_from_user+0x29/0xd0
[  480.216533][T13761]        compat_blk_trace_setup+0xc9/0x200
[  480.218211][T13761]        blk_trace_ioctl+0x24a/0x290
[  480.219743][T13761]        compat_blkdev_ioctl+0x13c/0x750
[  480.221356][T13761]        __do_compat_sys_ioctl+0x1cb/0x2c0
[  480.223037][T13761]        __do_fast_syscall_32+0x73/0x120
[  480.224636][T13761]        do_fast_syscall_32+0x32/0x80
[  480.226176][T13761]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  480.228137][T13761] 
[  480.228137][T13761] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}:
[  480.230326][T13761]        __mutex_lock+0x19b/0xa60
[  480.231770][T13761]        blk_register_queue+0x13c/0x4f0
[  480.233349][T13761]        add_disk_fwnode+0x785/0x1300
[  480.234898][T13761]        brd_alloc.isra.0+0x50a/0x7c0
[  480.236439][T13761]        brd_init+0x12b/0x1d0
[  480.237796][T13761]        do_one_initcall+0x128/0x630
[  480.239326][T13761]        kernel_init_freeable+0x58f/0x8b0
[  480.240953][T13761]        kernel_init+0x1c/0x2b0
[  480.242351][T13761]        ret_from_fork+0x45/0x80
[  480.243779][T13761]        ret_from_fork_asm+0x1a/0x30
[  480.245291][T13761] 
[  480.245291][T13761] -> #0 (&q->sysfs_lock){+.+.}-{4:4}:
[  480.247439][T13761]        __lock_acquire+0x249e/0x3c40
[  480.248971][T13761]        lock_acquire.part.0+0x11b/0x380
[  480.250579][T13761]        __mutex_lock+0x19b/0xa60
[  480.252015][T13761]        blk_register_queue+0x132/0x4f0
[  480.253585][T13761]        add_disk_fwnode+0x785/0x1300
[  480.255113][T13761]        md_alloc+0x393/0x1030
[  480.256498][T13761]        md_probe+0x6e/0xd0
[  480.257810][T13761]        blk_request_module+0x115/0x1e0
[  480.259394][T13761]        blkdev_get_no_open+0x7a/0xe0
[  480.260933][T13761]        bdev_file_open_by_dev+0x6b/0x210
[  480.262573][T13761]        swsusp_check+0x78/0x410
[  480.263990][T13761]        software_resume+0x6d/0x400
[  480.265472][T13761]        resume_store+0x249/0x460
[  480.266918][T13761]        kobj_attr_store+0x55/0x80
[  480.268380][T13761]        sysfs_kf_write+0x117/0x170
[  480.269863][T13761]        kernfs_fop_write_iter+0x33d/0x500
[  480.271543][T13761]        vfs_write+0x5ae/0x1150
[  480.272924][T13761]        ksys_write+0x12b/0x250
[  480.274318][T13761]        __do_fast_syscall_32+0x73/0x120
[  480.275929][T13761]        do_fast_syscall_32+0x32/0x80
[  480.277472][T13761]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  480.279408][T13761] 
[  480.279408][T13761] other info that might help us debug this:
[  480.279408][T13761] 
[  480.282282][T13761] Chain exists of:
[  480.282282][T13761]   &q->sysfs_lock --> &q->q_usage_counter(io)#50 --> &q->sysfs_dir_lock
[  480.282282][T13761] 
[  480.286233][T13761]  Possible unsafe locking scenario:
[  480.286233][T13761] 
[  480.288327][T13761]        CPU0                    CPU1
[  480.289841][T13761]        ----                    ----
[  480.291371][T13761]   lock(&q->sysfs_dir_lock);
[  480.292711][T13761]                                lock(&q->q_usage_counter(io)#50);
[  480.294936][T13761]                                lock(&q->sysfs_dir_lock);
[  480.296993][T13761]   lock(&q->sysfs_lock);
[  480.298233][T13761] 
[  480.298233][T13761]  *** DEADLOCK ***
[  480.298233][T13761] 
[  480.300527][T13761] 8 locks held by syz.0.1601/13761:
[  480.301999][T13761]  #0: ffff8880247f42b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390
[  480.304471][T13761]  #1: ffff888047f24420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250
[  480.306926][T13761]  #2: ffff888049c74088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500
[  480.309642][T13761]  #3: ffff8880416dab48 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500
[  480.312511][T13761]  #4: ffffffff8dc80d08 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x63/0x400
[  480.315409][T13761]  #5: ffffffff8e8b8e28 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x29/0x1e0
[  480.318127][T13761]  #6: ffffffff8f62a948 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x1030
[  480.320586][T13761]  #7: ffff888043bc54a8 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0
[  480.323379][T13761] 
[  480.323379][T13761] stack backtrace:
[  480.325055][T13761] CPU: 1 UID: 0 PID: 13761 Comm: syz.0.1601 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
[  480.328070][T13761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  480.331060][T13761] Call Trace:
[  480.332022][T13761]  <TASK>
[  480.332868][T13761]  dump_stack_lvl+0x116/0x1f0
[  480.334209][T13761]  print_circular_bug+0x41c/0x610
[  480.335653][T13761]  check_noncircular+0x31a/0x400
[  480.337067][T13761]  ? __pfx_check_noncircular+0x10/0x10
[  480.338626][T13761]  ? kernfs_add_one+0x39d/0x520
[  480.340025][T13761]  ? lockdep_lock+0xc6/0x200
[  480.341351][T13761]  ? __pfx_lockdep_lock+0x10/0x10
[  480.342803][T13761]  ? up_write+0x1b2/0x520
[  480.343998][T13761]  __lock_acquire+0x249e/0x3c40
[  480.345401][T13761]  ? __pfx___lock_acquire+0x10/0x10
[  480.346891][T13761]  ? sysfs_add_file_mode_ns+0x227/0x3b0
[  480.348475][T13761]  lock_acquire.part.0+0x11b/0x380
[  480.349932][T13761]  ? blk_register_queue+0x132/0x4f0
[  480.351428][T13761]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  480.353065][T13761]  ? rcu_is_watching+0x12/0xc0
[  480.354451][T13761]  ? trace_lock_acquire+0x14e/0x1f0
[  480.355947][T13761]  ? blk_register_queue+0x132/0x4f0
[  480.357444][T13761]  ? lock_acquire+0x2f/0xb0
[  480.358754][T13761]  ? blk_register_queue+0x132/0x4f0
[  480.360266][T13761]  __mutex_lock+0x19b/0xa60
[  480.361573][T13761]  ? blk_register_queue+0x132/0x4f0
[  480.363072][T13761]  ? kernfs_get+0x1f/0x30
[  480.364315][T13761]  ? kobject_add_internal+0x54e/0x990
[  480.365858][T13761]  ? blk_register_queue+0x132/0x4f0
[  480.367365][T13761]  ? __pfx___mutex_lock+0x10/0x10
[  480.368804][T13761]  ? kobject_add+0x17c/0x240
[  480.370101][T13761]  ? blk_register_queue+0x132/0x4f0
[  480.371473][T13761]  blk_register_queue+0x132/0x4f0
[  480.372916][T13761]  add_disk_fwnode+0x785/0x1300
[  480.374316][T13761]  md_alloc+0x393/0x1030
[  480.375548][T13761]  md_probe+0x6e/0xd0
[  480.376666][T13761]  ? __pfx_md_probe+0x10/0x10
[  480.377919][T13761]  blk_request_module+0x115/0x1e0
[  480.379366][T13761]  blkdev_get_no_open+0x7a/0xe0
[  480.380758][T13761]  bdev_file_open_by_dev+0x6b/0x210
[  480.382246][T13761]  swsusp_check+0x78/0x410
[  480.383537][T13761]  software_resume+0x6d/0x400
[  480.384887][T13761]  resume_store+0x249/0x460
[  480.386188][T13761]  ? __pfx_resume_store+0x10/0x10
[  480.387598][T13761]  ? __pfx_resume_store+0x10/0x10
[  480.389018][T13761]  kobj_attr_store+0x55/0x80
[  480.390350][T13761]  ? __pfx_kobj_attr_store+0x10/0x10
[  480.391875][T13761]  sysfs_kf_write+0x117/0x170
[  480.393231][T13761]  kernfs_fop_write_iter+0x33d/0x500
[  480.394753][T13761]  ? __pfx_sysfs_kf_write+0x10/0x10
[  480.396255][T13761]  vfs_write+0x5ae/0x1150
[  480.397497][T13761]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  480.399166][T13761]  ? __pfx___mutex_lock+0x10/0x10
[  480.400613][T13761]  ? __pfx_vfs_write+0x10/0x10
[  480.401983][T13761]  ksys_write+0x12b/0x250
[  480.403233][T13761]  ? __pfx_ksys_write+0x10/0x10
[  480.404624][T13761]  __do_fast_syscall_32+0x73/0x120
[  480.406087][T13761]  do_fast_syscall_32+0x32/0x80
[  480.407495][T13761]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  480.409274][T13761] RIP: 0023:0xf7fd3579
[  480.410753][T13761] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  480.415642][T13761] RSP: 002b:00000000f510555c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  480.417970][T13761] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000
[  480.420229][T13761] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000
[  480.422472][T13761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  480.424713][T13761] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  480.426963][T13761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  480.429222][T13761]  </TASK>
[  480.560633][T13761] PM: Image not found (code -6)

VM DIAGNOSIS:
06:05:10  Registers:
info registers vcpu 0

CPU#0
RAX=00000000014f6a24 RBX=0000000000000000 RCX=ffffffff8b1a6899 RDX=ffffed1005686fee
RSI=ffffffff8bb16fc0 RDI=ffffffff81702ec9 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20
R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000
R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cead0 R15=0000000000000000
RIP=ffffffff8b1a7c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020001000 CR3=0000000064034000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff851449b5 RDI=ffffffff9a668200 RBP=ffffffff9a6681c0 RSP=ffffc900067f6f80
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36
R12=0000000000000000 R13=0000000000000064 R14=ffffffff85144950 R15=0000000000000000
RIP=ffffffff851449df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c3c825b CR3=0000000071d36000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000000072f75c RBX=0000000000000002 RCX=ffffffff8b1a6899 RDX=ffffed10056c6fee
RSI=ffffffff8bb16fc0 RDI=ffffffff81702ec9 RBP=ffffed10039df000 RSP=ffffc9000048fe08
R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001
R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901cead0 R15=0000000000000000
RIP=ffffffff8b1a7c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000556d9e6a2000 CR3=000000004b8a0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7463ff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=1ffff11009815581 RBX=ffff88804c0aaba0 RCX=dffffc0000000000 RDX=ffff888021230000
RSI=ffffffff81ecafdf RDI=ffff88804c0aac08 RBP=dffffc0000000000 RSP=ffffc90007fdfb98
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=00000000000a2001
R12=0000000000000008 R13=0000000000000021 R14=0000000000000000 R15=00007fe75039f000
RIP=ffffffff81ecafee RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fe7504c90a0 CR3=0000000075342000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000